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SUMMARY 


Analysis  of  all  NATO  member  air  transport  accidents,  1964-1975,  revealed  that  injuries  and  fatalities 
when  such  information  could  be  determined,  were  primarily  due  to  the  post-crash  effects  of  fire,  smoke  and 
toxic  fumes,  and  secondarily  to  crash  impact.  Future  air  transport  design  trends  were  reviewed,  and  approx 
imately  150  advanced  crash-impact  and  emergency-egress  concepts,  devices,  and  state-of-the-art  techniques 
were  evaluated.  These  included  occupant  restraints,  smoke  hoods,  aisle  and  egress  emergency  lighting, 
passenger  warning  systems,  escape  slides  and  devices,  heat  shields,  high-energy  emergency  egress  systems, 
and  emerqency  inflight  egress  systems.  It  was  concluded  that  rear-facing  passenger  seats,  the  NASA  Ames 
(21+GX  45+Gz)  airline  seat,  and  the  production  Sheldahl  smoke  hood  can  provide  significantly  improved  occu- 
pant protection,  while  high-energy  emergency  egress  systems  appear  promising  for  future  aircraft.  More 
research  is  needed  to  improve  passenger  warning  and  public  address  systems.  Concepts  of  emergency  inflight 
egress  are  not  yet  feasible,  although  technically  within  the  state-of-the-art. 


SOMMAIRE 


Une  analyse  de  tous  les  accidents  a£riens  ayant  eu  lieu  entre  1964  et  1975  et  concernant  les  pays 
appartenant  a l'OTAN  a revele  que  les  blessures  et  les  fatalites,  lorsque  ces  renseignements  ont  pu  etre 
releves,  ont  resulte  principalement  des  effets  d'incendie,  de  fumee,  et  de  fumes  toxiques  aprfes  l'ecrase- 
ment.  Les  tendances  dans  le  dessin  futur  des  transports  aeriens  ont  ete  evaluees  ainsi  qu'environ  150 
conceptes  comprenant  des  conceptes  apres-ecrasement  et  des  dispositifs  avances  et  techniques  actuelles 
pour  les  sorties  de  secours.  Cette  evaluation  comporte  les  contraintes  de  passagers,  les  capuchons  anti- 
fumee,  1 1 i llumination  des  couloirs  et  des  sorties  de  secours,  1 'avertissement  des  passagers,  les  toboggans 
et  dispositifs  de  sauvetage,  les  protecteurs  thermiques,  les  sorties  de  secours  a haute  energie  et  les 
sorties  de  secours  en  vol . On  a conclu  que  des  sieges  disposes  dos  contre  dos,  le  siege  NASA  Ames  (+21GX 
45GZ),  et  les  capuchons  anti-fumee  Sheldahl  peuvent  fournir  une  meilleure  protection  au  voyageur,  tandis 
que  les  systemes  de  sortie  de  secours  a haute  energie  semblent  s'annoncer  bien  a l'avenir.  Plus  de  re- 
cherches  seront  necessaires  pour  ameliorer  les  systemes  de  communication  publique.  Les  conceptes  des  sor- 
ties de  secours  en  vol  ne  sont  pas  encore  satisfaisants , quoique  du  point  de  vue  technique  ils  sont  dans 
les  capacites  de  1 'etat-present  des  recherches. 
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1 . INTRODUCTION 


1 .1  Background 

Crash  impact  experience  in  current  civil  and  military  air  transport  aircraft  operations  indicates 
that  many  injuries  and  fatalities  occur  that  might  have  been  prevented  or  reduced  with  improved  occupant 
protection  techniques.  While  considerable  attention  has  been  given  to  improving  occupant  escape  and 
crash  survival  in  military  fighter  and  helicopter  type  aircraft,  as  well  as  the  recent  focus  on  improving 
occupant  crash  safety  standards  in  automobiles  and  other  ground  vehicles,  relatively  little  attention  has 
been  given  to  providing  similar  protection  for  the  air  transport  occupant. 

During  the  past  few  years  there  has  been  an  increased  emphasis  on  studies  relating  to  crash  impact 
protection,  emergency  egress,  and  survival,  resulting  in  developments  which  have  greatly  advanced  the 
state-of-the-art.  Some  of  these  advances  have  resulted  in  spin-offs  from  aerospace  technology,  others 
have  been  spurred  by  identification  of  specific  deficiencies  in  analysis  of  current  accident  experience, 
and  many  have  resulted  from  efforts  of  the  Department  of  Transportation  to  improve  occupant  protection  in 
ground  vehicle  accidents.  However,  no  single  published  document  has  previously  attempted  to  bring  togeth- 
er and  evaluate  systematically  those  developments  in  the  state-of-the-art  which  might  have  especial  appli- 
cation to  crew  and  passenger  crash  safety  in  air  transport  aircraft. 

A basis  for  evaluating  the  particular  areas  where  increased  protection  is  necessary  in  air  transport 
crashes  can  best  be  determined  by  analysis  of  previous  accident  experience.  Unfortunately,  these  areas 
often  receive  little  attention  until  a major  air  disaster  emphasizes  the  problem  and  spurs  research  for  a 
solution.  An  example  is  the  serious  deficiency  of  emergency  warning  systems  and  crew-passenger  communica- 
tion which  was  evident  in  the  ditching  of  a McDonnell  Douglas  DC-9  jet  transport  near  St.  Croix,  Virgin 
Islands  in  May,  1970.  In  this  ditching  the  public  address  system  was  inoperative  from  flight  deck  to 
cabin  and  no  ditching  warning  (after  a 10-minute  warning)  was  given  to  either  passengers  or  some  crew. 

This  resulted  in  numerous  injuries  to  unrestrained  passengers  standing  in  the  aisles  still  donning  life 
jackets  at  the  time  of  impact  [National  Transportation  Safety  Board,  1970;  1971;  1972  (10-12)]. 

An  analysis  of  civil  air  transport  accidents  from  1957  through  1967  resulted  in  the  estimate  by 
Caldara  that  35  to  50%  of  the  794  non-survivors  of  survivable  air  carrier  crashes  could  have  been  saved 
had  adequate  egress  been  available  (4).  Some  three-fourths  of  the  exits  available  were  not  used,  due  to 
jamming  from  fuselage  distortion,  blockage,  fire,  or  other  reasons.  Studies  of  air  transport  evacuations 
during  major  crashes  have  shown  that  the  primary  cause  for  fatalities  has  been  attributed  to  inhalation 
of  smoke,  toxic  fumes,  and  fire.  At  present  no  protection  at  all  is  given  crew  or  passengers  under  fire 
and  smoke  egress  conditions,  although  work  on  improving  flight-deck  crew  masks  has  been  initiated.  Thus, 
a major  section  of  this  report  brings  together  the  state-of-the-art  of  smoke  hood  devices.  Previously 
such  information  has  been  unpublished,  or  scattered  in  technical  reports,  and  difficult  to  locate. 

Space  technology  has  resulted  in  many  concepts  and  techniques  which  might  have  application  to  in- 
creased air  transport  crash  safety  and  passenger  life  support.  An  example  of  potential  application  of 
space  technology  to  air  transport  crash-fire  protection  is  illustrated  by  the  Apollo  spacecraft  develop- 
ment of  fire-retardant  materials  such  as  polyisocyanurate  foam  and  an  intumescent  paint  which  acts  on 
ablative  principles  to  provide  additional  thermal  protection.  Recent  work  by  the  National  Aeronautics 
and  Space  Administration  (NASA)  has  taken  the  approach  of  heat  shielding  the  passenger  compartment  by  a 
fire-retardant  shell  using  the  above  foam  and  paint  to  protect  the  occupants  long  enough  for  the  fire  to 
burn  out  or  be  extinguished. 

The  concept  of  providing  a means  of  emergency  in-flight  egress  in  civil  air  transport  aircraft  has 
had  very  little  attention.  Several  systems  have  been  proposed,  including  one  which  would  modify  present 
operational  techniques  of  aerial  cargo  delivery  for  human  passenger  and  crew  usage,  but  none  has  been 
evaluated  thoroughly  for  this  application.  In  a technology  which  has  expended  considerable  effort  in  de- 
vising methods  of  astronaut  space  rescue,  it  would  seem  to  be  within  the  state-of-the-art  to  similarly 
seriously  consider  in-flight  egress  of  air  transport  passengers  in  the  event  of  presently  non-survi vabl e 
in-flight  catastrophic  structural  failures.  Current  accident  experience  shows  that  in-flight  structural 
failure  as  a result  of  extreme  turbulence,  mid-air  collision,  or  other  emergency  such  as  fire,  explosive 
decompression,  bird  strikes,  or  explosion  is  not  an  infrequent  occurrence,  as  is  shown  by  data  presented 
in  Section  2 and  Appendices  A-D.  Certainly  the  potential  for  an  increased  incidence  of  such  events  should 
be  balanced  against  prior  experience. 

Research  and  development  of  advanced  restraint  systems  has  had  major  emphasis  during  the  past  decade 
from  many  organizations,  particularly  in  the  United  States.  The  U.S.  Army  has  developed  improved  seating 
and  restraint  systems  for  helicopter  and  light  aircraft  aircrew.  These  offer  increased  impact  protection 
to  troops  [Carr,  1972  (5)]  and  aircrew  [Carr  & Desjardins,  1975  (6)].  Studies  by  NASA,  once  focused  on 
more  exotic  spacecraft  systems,  include  design  and  development  of  the  NASA  Ames  Integral  Passenger  Air- 
craft Seat,  tested  to  impact  levels  of  21 +GX  45+Gz  for  air  transports  [Kubokawa,  1974  (8)].  U.S.  Air 
Force  studies  have  tested  the  air  bag  restraint  system  to  123  G (-Gx)  with  baboons  [Clarke,  et  al . , 1970 
(7)].  Inflatable  air  bags  have  been  combined  with  the  U.K.  Institute  of  Aviation  Medicine  version  of  the 
F-lll  harness  for  providing  increased  protection  in  lateral  capsule  impacts  [Shaffer  & Brinkley,  1974 
(17)].  The  Federal  Aviation  Administration  (FAA)  has  also  explored  the  possibility  of  using  passive  air 
bag  restraint  in  aircraft  [Sommers,  1972  (18)].  A systems  evaluation  of  air  transport  passive  restraint 
has  been  reported  in  1974  by  Robbins  and  Snyder  (14),  while  industry  has  considered  inflatable  air  re- 
straints for  McDonnell  Douglas  DC-10  seat  backs,  and  new  developments  in  aircrew  seating  (The  Concorde 
and  IPEC0  Europe  Ltd.  aircrew  seats). 

Due  to  large-scale  efforts  of  the  automotive  industry  to  comply  with  new  federal  requirements  in  the 
U.S.  and  other  NATO  countries,  considerable  effort  has  gone  into  design,  development,  and  testing  of  "pas- 
sive" restraint  systems.  These  are  presently  required  to  be  installed  in  all  automotive  vehicles  manu- 
factured for  sale  in  the  U.S.  after  August  14,  1976,  for  1977  vehicles  [National  Highway  Traffic  Safety 
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Administration,  1975  (9)].  "Passive1'  restraint  applies  to  any  system  which  does  not  require  occupant  ac- 
tion for  initiation.  The  most  common  of  these  devices  are  inflatable  ("air  bag")  restraint  systems.  Ex- 
amples of  other  methods  of  achieving  this  objective  include  deployable  net  restraint,  "blanket,"  and  head 
restraints.  The  requirement  for  a passive  system  has  resulted  from  findings  that  too  few  automotive  oc- 
cupants wear  present  protective  restraint  systems  and  is  based  on  a decision  that  a more  automatic  system 
is  necessary  to  solve  this  problem.  Although  developed  for  automotive  impact,  which  involves  quite  dif- 
ferent crash  profiles  in  respect  to  magnitude,  vector  directions,  and  time  duration  than  in  typical  air- 
craft accidents,  there  has  been  interest  in  application  to  aircraft.  Early  tests  of  a pre-inflated  air 
bag  device  in  the  FAA  crash  test  of  a DC-7  transport  in  1964,  and  a series  of  ten  decelerations  at  impact 
velocities  up  to  87  mph  in  1965,  indicated  considerable  protective  capabilities,  but  it  was  also  evident 
that  a cabin  full  of  air  bags  post-impact  could  create  major  evacuation  problems.  Since  then  such  systems 
have  been  greatly  refined,  and  must  be  re-examined  in  the  air  transport  context. 

Efforts  at  improving  air  transport  crash  impact  survival  and  emergency  egress  have  developed  primar- 
ily during  the  past  10  years,  although  classic  and  pioneering  crash  fire  tests  were  conducted  in  early 
National  Advisory  Committee  for  Aeronautics  (NACA)  tests  [Black,  1952  (2)].  In  1967  three  groups  inde- 
pendently conducted  overall  assessments  of  the  state-of-the-art  of  crash  safety  and  crew  and  passenger 
life  support  for  air  transport  aircraft.  The  USAF-Industry  Life  Support  Conference  (23)  at  Las  Vegas 
considered  a number  of  recommendations  to  responsible  agencies  for  the  immediate  and  long-range  solution 
of  many  of  the  most  pressing  problems  and  requirements  in  the  life  support  system.  Within  the  industry, 
a Joint  Crashworthiness  Development  Program  was  conducted  by  the  Aerospace  Industries  Association  of 
America,  Inc.  (1).  This  one-year  study  resulted  in  an  industry  evaluation  of  the  state-of-the-art  at 
that  time  of  interior  materials,  fire  suppression,  smoke  and  fume  protection,  emergency  lighting  and  exit 
awareness,  and  evacuation  systems.  Also  in  1967  North  American  Rockwell  Corporation  [Roebuck,  1968  (15)] 
conducted  an  analysis  of  new  concepts  for  emergency  evacuation  of  air  transport  aircraft  for  the  Aircraft 
Development  Service  of  the  Federal  Aviation  Administration. 

Concurrent  USAF  studies  related  to  military  air  transports  have  also  been  conducted  by  Sawyer  [1967 
(16)],  Brown  [1969  (3)],  Reagin,  et  al . [1970  (13)],  Snyder  and  Robbins  [1971;  1972  (22,  21)],  and  Robbins 
and  Snyder  [1974  (14)].  The  1970  study  by  the  Combat  Egress  Working  Group  [Reagin,  et  al.,  1970  (13)]  in- 
vestigated passenger/cargo  aircraft  in  the  USAF  inventory  to  identify  equipment  and  procedural  deficien- 
cies. This  represents  the  most  complete  analysis  of  crew  and  passenger  crash  safety,  and  provides  many 
specific  recommendations  for  areas  where  improvements  are  necessary.  The  Snyder  and  Robbins  study  con- 
ducted for  the  Air  Force  by  the  University  of  Michigan  in  1971  represented  the  first  major  effort  to  eval- 
uate military  air  transport  safety  from  a point  of  view  of  state-of-the-art,  using  a systems  engineering 
approach  [Snyder,  1971;  1975;  Snyder  & Robbins,  1971;  Robbins  & Snyder,  1974  (14,  19-22)].  This  has 
formed  the  nucleus  for  the  current  study,  which  attempts  to  update  developments  during  the  past  four-year 
period. 

1 .2  Scope  and  Objectives 

The  purpose  of  this  study  was  to  bring  together  and  evaluate  new  crash  impact,  escape,  and  survival 
devices  and  techniques  applicable  to  aircrew  and  passengers  in  air  transport  aircraft.  Advanced  state- 
of-the-art  technological  developments  were  examined  in  the  areas  of  advanced  restraint  systems,  smoke  hood 
protective  devices,  aisle  and  evacuation  markers,  passenger  warning  and  public  address  systems,  and  other 
research  programs,  system  developments  and  technology  available  or  currently  anticipated  programs  which 
might  have  application  to  current  or  future  air  transport  aircraft.  As  one  basis  for  establishing  priori- 
ties of  future  requirements,  current  air  transport  accident  experience  is  presented  from  NATO  countries  in 
Section  2. 

In  the  1971  Snyder  and  Robbins  USAF  study  of  military  air  transports  (22)  a complete  systems  approach 
was  required  to  objectively  evaluate  the  systems,  devices,  and  concepts,  and  in  the  current  study,  use  of 
military  standards  as  a basis  for  assessment  has  been  continued.  In  this  regard,  consideration  was  given 
to  both  the  effects  on  the  aircraft  and  crew  members  in  accordance  with  MIL-STD-1472A  (24).  A preliminary 
analysis  in  accordance  with  MIL-STD-785A  (25)  was  conducted  on  all  concepts  included  in  the  study  to  de- 
termine which  systems  indicate  the  highest  reliability.  System  components  must  be  designed  for  minimum 
routine  maintenance  and  servicing  by  technicians  assigned  to  the  using  unit,  field  maintenance  activities, 
and  for  major  repairs  by  depot  level  maintenance,  in  accordance  with  MIL-STD-470  (26).  In  addition,  a 
preliminary  Hazard  Analysis  prepared  in  accordance  with  MIL-STD-882  (27)  to  evaluate  system  safety  was  in- 
cluded. In  this  respect  overall  systems  analysis  has  been  initiated  with  emphasis  on  the  event-oriented 
nature  of  the  problem  of  survival  and  escape  from  a crashed  aircraft.  A time-scaled  flow  chart  of  the 
crash  and  escape  event  has  been  developed  to  form  a framework  for  the  performance  evaluation  of  each  con- 
cept studied.  This  is  supplemented  by  a detailed  discussion  of  factors  included  in  the  analysis  of  system 
safety,  reliability,  maintainability,  human  engineering  aspects,  and  technological  feasibility.  It  is  be- 
lieved that  this  approach  provides  a reasonable  basis  for  system  evaluation,  and  is  included  in  Appendix  E. 

While  major  consideration  has  been  given  to  review  of  smoke  hood  protective  devices,  advanced  re- 
straint systems,  and  emergency  egress,  this  also  reflects  the  state-of-the-art.  Less  attention  has  been 
given  in  the  past  to  the  development  of  new  (and  feasible)  concepts  for  aisle  and  path  markers,  emergency 
public  address  systems,  emergency  lighting  requirements,  and  seating.  This  study  has  attempted  to  bring 
together  and  evaluate  the  state-of-the-art  in  the  areas  outlined  as  of  1975. 

1 . 3 Future  Trends 


For  planning  purposes,  the  Federal  Aviation  Administration  National  Aviation  System  Plan  of  March, 
1975,  projects  long-range  goals  through  1985  (44).  An  earlier  FAA  study  projected  through  1982  (43). 

The  1975  study  indicates  that  the  number  of  passengers  carried  by  the  U.S.  scheduled  air  carriers  may  in- 
crease from  206.5  million  in  1974  to  355.6  million  by  1985.  FAA  also  forecasts  an  increase  in  the  U.S. 
commercial  air  carriers'  fleet  from  2,511  aircraft  in  1974  to  3,383  aircraft  by  1985.  For  comparison,  the 
U.S.  general  aviation  fleet  is  estimated  to  grow  from  153,500  in  1974  to  262,000  in  1985. 


3 


A previous  study  took  an  even  more  extensive  look  at  airline  growth  during  the  next  decade.  Goals 
and  recommendations  concerning  what  U.S.  policy  should  be  for  Civil  Aviation  Research  and  Development 
(CARD)  in  1985  were  outlined  in  a U.S.  Senate-sponsored  joint  Department  of  Transportation/National  Aero- 
nautics and  Space  Administration  study  published  in  1971  (36,  37).  This  suggested  priority  be  given  to 
environment,  congestion,  low-density  short-haul  transport,  and  regulation  reform.  One  prediction  was  that 
by  1985  there  will  be  a need  for  larger  air  transports  capable  of  carrying  800  to  1,000  passengers.  It 
was  estimated  that  the  "free-world"  air  fleet  would  have  grown  from  5,100  to  8,300  (air  carrier)  aircraft. 
Such  projections  may  well  affect  future  living  patterns  [Ward,  1971  (67)],  and  may  provide  new  medical  and 
psychological  areas  of  concern  [Gerathewohl , et  al . , 1971;  Mohler,  1966;  Schaffer,  1969  (48,  55,  59)]. 

1.3.1  Energy  Effect  Upon  Design.  Trends  in  future  transport  designs  may  be  significantly  influ- 

enced by  the  recent  concern  for  energy  conservation.  At  the  1974  World  Transport  Conference,  for  example, 
Bouillioun,  president  of  the  Boeing  Commercial  Airplane  Company,  noted:  "The  need  for  greater  fuel  econo- 

my may  drive  future  designs  toward  higher  aspect  ratios,  reduced  wing  sweep,  and  greater  thickness/cord 
ratios  than  aircraft  currently  in  production.  Design  cruise  speeds  could  be  slightly  less  than  today's 
designs.  By  the  end  of  the  20th  century,  changes  in  the  energy  balance  may  well  provide  the  impetus  of 
more  exotic  transports  such  as  hydrogen-fueled  or  1 ami nari zed-flow  aircraft."  (35)  This  forecast  also 
pointed  out  that  development  of  a new  technological  improvement  or  concept  may  still  require  15  to  20 
years  for  the  present  "commercial  aviation  system"  to  incorporate  it. 

1.3.2  Next-Generation  Transports.  Already  many  designs  for  the  1980's  reflect  concern  for  energy; 
the  McDonnell  Douglas  Corporation's  DC-X-200  wi de-body  transport  designed  for  short-to-medium-haul  traffic, 
anticipated  to  be  available  in  1980-81,  may  employ  a smaller  and  lighter  supercritical  wing  (Mach  0.82 
cruise)  featuring  reduced  wing  sweep  angle,  increased  thickness,  a higher  aspect  ratio,  and  a small  wing 
area  [Fink,  1975a  (45)].  The  McDonnell  Douglas  DC-X-200,  aimed  toward  199-219  passengers,  is  a scaled- 
down  twin-engine  version  of  the  DC-10-10  trijet  for  the  1980's  short-haul  market  [Fink,  1975b;  1975c  (46, 
47)].  Boeing  is  currently  designing  an  advanced  medium-range  7X7  replacement  for  the  Boeing  727  [Aviation 
Week,  1975a  (28)]. 


The  French  are  studying  several  next-generation  commercial  transports,  including  the  Dassault- 
Breguet  Mercure  200,  a twin-engine  142-159  seat  aircraft  based  upon  the  135-seat  Mercure  100  presently 
operated  only  in  France  by  Air  Inter;  the  Airbus  Industrie  A300B  wide  body  transport  in  several  versions, 
including  a four-engine  long-range  air  transport  with  200-220  seats;  and  the  Aerospatiale  AS-200,  a design 
encompassing  two-,  three-,  and  four-engine  aircraft  with  seating  capacities  ranging  from  120-170  passen- 
gers in  the  twin-engine  version  to  180-220  in  the  four-engine.  Aerospatiale  airbus  versions  under  study 
include  the  A300C,  a convertible  passenger/cargo  version;  the  A300B9,  a stretched  version  seating  322 
(compared  to  about  270  in  the  A300B2  and  B4);  the  A300B10,  a shortened  derivative  with  210-220  seats;  and 
the  A300B11,  an  alternative  derivative  shortened  airbus  using  different  engines  [Ropelewski,  1975  (58)]. 

By  1985  some  "30  to  40"  Anglo-French  Concorde  supersonic  transport  aircraft  may  be  in  operation,  as  well 
as  increased  numbers  of  the  Soviet  Tupolev  Tu-144  [Shumann,  1975  (63)]. 

1.3.3  Span-Loaded  Flying  Wing.  Future  aircraft  trends  may  also  be  indicated  by  NASA  studies  of  a 
large  span-loaded  flying  wing  aesign  as  a future  fuel -efficient  air  freighter.  Such  aircraft  would  have 
a payload  of  up  to  six  times  that  of  the  Boeing  747F  freighter,  the  Lockheed  C-5A,  or  the  Douglas  DC-10 
tanker/cargo  aircraft,  and  a minimum  wing  thickness  of  3m( 1 0 1 ) would  accommodate  intermodal  containers  and 
other  outsized  cargo  (Fig.  1).  Designers  have  considered  use  of  8 large  overwing-mounted  turbofans,  al- 
lowing cargo  to  be  carried  inside  the  supercritical -type  wing.  Distributing  cargo  across  the  span  to  off- 


set lift  forces  is  expected  to  reduce  structural  weight  and  improve  efficiency  [Industry  Observer,  1974 
(52)]. 


Fig.  1.  Future  concept  for  air  cargo.  NASA  Spanloader  cargo  flying  wing, 
having  2.4  million  lb  takeoff  weight,  span  of  375  feet  [Aviation  Week,  1974 
(28)],  and  utilizing  air  cushion  landing  system.  After  Lange,  1975  (53). 
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One  unique  proposed  feature  of  the  Spanloader  is  use  of  a three-element  air-cushion  landing  system, 
permitting  this  air  transport  to  be  operated  from  unprepared  terrain  or  water.  The  principal  elements  of 
the  air  cushion  landing  system  are  the  trunks  and  ducting  for  air  distribution.  As  illustrated  in  Fig.  2 
the  head-on  profile  shows  an  enlarged  cross  section  through  the  center  body,  with  the  trunk  inflated.  The 
air  supply  duct  is  continuous  from  outboard  body  to  outboard  body,  with  air  admitted  to  the  trunks  by 
valving.  The  air  can  be  admitted  to  non-perforated  inner  liners  and  sealed  off  for  parking.  Such  a system 
might  also  alter  the  crash  impact  pulse  presently  seen  in  air  transport  takeoff  or  landing  accidents  and 
increase  potential  occupant  survivability. 


TRUNK 

LINER 


Fig.  2.  Concept  for  air  cushion  landing  system 
for  Spanloader  Transport  Aircraft,  showing  en- 
larged section  of  air  cushion.  After  Lange,  1975  (53). 


1.3.4  Very  Wide  Lifting-Body  Transports.  For  the  past  three  years,  Boeing  has  been  studying  a new 
freighter  concept  with  Cole's  International  Husky  Corporation,  including  extensive  wind  tunnel  tests  on  an 
extremely  wide  fuselage  in  lifting-body  shape  housing  five  side-by-side  cargo  bays  27  m (90 ')  long  (Fig. 3). 
The  long-range  version  is  intended  to  meet  USAF's  C-XX  requirement  for  advanced  cargo  transport  (57). 


1.3.5  Liquid  Hydrogen-Fueled  Transports.  Some  future  air  carrier  aircraft  may  be  fueled  by  liquid 
hydrogen  as  an  alternative  fuel”!  However,  one  of  the  design  problems  resulting  from  the  use  of  low-densi- 
ty LH2  fuel  is  the  volume  of  tankaqe  required  when  compared  to  conventionally-fueled  aircraft.  Wide-body 
aircraft  employ  high  bypass  ratio  engines  to  reduce  fuel  volume  required,  while  narrow-body  transports 
utilize  low  bypass  ratio  engines.  The  LH2~fueled  aircraft  would  require  approximately  4 times  the  volume 
for  JP-fueled  airplanes  for  a given  gross  weight,  or  3.7  times  when  equal  payload/range  capability  is 
considered  TCarline,  1975  (38)].  Long-range  large  bodied  aircraft  might  have  LH2  tanks  located  in  the 
upper  and  rear  fuselage.  Short-haul  smaller  sized  air  transports  of  the  McDonnell  Douglas  DC9-30  category 
might  be  designed  with  external  tanks,  as  illustrated  in  Figs.  4 and  5. 
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Fig.  4.  Possible  configuration  of  short-haul  liquid  hydrogen-fueled  air- 
craft with  external  tanks  [Automotive  Engineering,  1975  (34)].  After 
Carline,  1975  (38).  


Fig.  5.  Conception  of  long-range  liquid  hydrogen-fueled  delta  winged  air  transport 
and  twin-fuselage  configuration,  featuring  hydrogen  tanks  slung  between  two  cabins 
[Automotive  Engineering,  1975  (34)].  After  Carline,  1975  (38). 


1.3.6  Very  Large  Transports.  A Boeing  Company  concept  for  a laminar  flow  control  future  air  trans- 
port features  a nigh  wing  bracecf  by  a strut  as  shown  in  Fig.  6.  The  European  aircraft  industry  may  be  ex- 
pected to  build  upon  the  knowledge  acquired  from  the  Concorde  and  Airbus  to  design  new  transportation  needs 
outside  the  present  subsonic  domination  of  the  U.S.  Dornier  cites  very  large  cargo  aircraft  as  one  area 

of  future  interest  with  cargo  aircraft  exceeding  600  t payloads.  A ten-engine  advanced  design  having 
1,000  t payload  capacity  has  been  suggested  by  Dornier  GmbH  [Dornier,  1975  (41)]. 

1.3.7  STOL  and  V/STOL  Air  Transports.  Another  direction  of  aircraft  design  is  in  the  STOL  (Short 
Takeoff  and  Landing)  and  V/STOL  ( Vert i cal/ Short  Takeoff  and  Landing)  configurations.  Current-generation 
aircraft,  such  as  the  Boeing  YC-14  Advanced  Medium  Short  Takeoff  and  Landing  Transport  (AMST)  and  the 
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Fig.  6.  Boeing  concept  of  high  wing  air  transport  braced  by 
struts.  After  Aviation  Week,  1975  (29). 


McDonnell  Douglas  YC-15  AMST,  are  currently  in  prototype  fly-off  competition  as  a USAF  replacement  for  the 
Lockheed  C-130  Hercules  transport  aircraft  [Boeing  YC-14,  1975;  Taylor,  1975  (33,  65)].  The  Boeing  YC-14 
and  McDonnell  Douglas  YC-15  advanced  medium  STOL  transport  AMST  prototype  programs  are  expected  to  provide 
technical  fallout  for  new  commercial  transports.  A 150-200  passenger  airliner  version  could  be  in  service 
by  1980,  although  a more  realistic  marketing  date  may  be  1985  [Marks,  1976  (54)].  The  AMST  adaptability 
to  future  commercial  versions  is  also  being  considered  by  NASA's  Quiet  Propulsive  Lift  Technology  program 
for  generating  commercial  transport  innovation.  However,  the  YC-15  military  version  with  a high  wing  and 
Mach  0.75  cruise  has  resulted  in  negative  airline  reaction  [Aviation  Week,  1975  (28)].  Wind  tunnel  tests 
of  other  advanced  short-haul  designs  for  the  1980's  are  underway  at  Ames  Research  Center,  NASA  [Elson, 

1975  (42)].  The  major  crashworthy  hazards  in  slow  approach  military  STOL  aircraft  involve  fuselage  crush- 
ing, flammable  fluid  ignition,  crew,  troop,  and  litter  patient  restraint  failures,  nose  landing  gear  fail- 
ure, and  cargo  restraint  failure  as  described  by  Haley,  1976  (50).  An  early  U.K.  V/STOL  design  for  a 
commercial  airliner  is  shown  in  Fig.  7,  illustrating  a British  Westland  VTOL  two-engine  tilt-wing  project 
[after  Cook,  1975  (39)]. 


Fig.  7.  British  Westland  VTOL  two-engine  tilt-wing  commercial 
air  carrier  design.  After  Cook,  1975  (39). 


In  Canada,  the  Canadair  Ltd  CL-84  tilt-wing  V/STOL,  a utility  12-man  or  16-troop  seat  aircraft,  made 
its  first  flight  in  1965.  Tripartite  instrument  flight  tests  and  transition  in  steep  profiles  were  con- 
ducted at  Pawtuxent  Naval  Air  Station,  Maryland  in  1972-73,  with  continuing  U.S.  Naval  evaluation  (SCS-CL- 
84)  in  1974  [Taylor,  1974  (64)].  The  de  Havilland  Canada  DHC-7  four-turboprop  "Quiet  STOL"  airliner  proj- 
ect was  begun  in  late  1972,  following  a worldwide  market  survey  of  short-haul  transport  requirements. 

This  new  "Dash  7"  aircraft  has  been  designed  for  downtown  STOL  ports  having  610  m (2,000  ft)  runways,  uti- 
lizing a quiet  Pratt  & Whitney  (Canada)  engine,  propellor  combination  which  is  anticipated  to  limit  exter- 
nal noise  to  95  EPNdb  at  152  m (500  ft)  from  the  aircraft  during  takeoff  and  landing.  This  aircraft  is 
intended  to  carry  50  passengers  plus  a crew  of  three  or  four.  Emergency  exits  are  located  on  each  side  at 
the  front  of  the  cabin  and  on  the  starboard  side  at  the  rear.  Two  pre-production  flight  test  aircraft 
have  been  built  to  date,  the  first  making  its  maiden  flight  at  Downview  on  27  March,  1975.  A third  air- 
frame has  undergone  static  testing  and  a fourth  will  be  used  for  fatigue  testing  [Taylor,  1975  (65)].  In 
addition,  six  DHC-6-300S  (MOT)  aircraft  have  been  used  in  tests.  Certification  is  expected  soon,  and 
fifty  orders  have  been  taken  to  date  [Newman,  CATA/STOL,  1976  (56)].  However,  these  aircraft  are  designed 
to  Federal  Air  Regulations  (FAR)  part  25,  and  appear  not  to  include  any  advanced  emergency  egress  or  crash- 
worthiness  requirements  beyond  current  standards. 

In  France  the  Armee  de  l'Air  Breguet  BR  941S  STOL  four-engined  high-wing  transport  utilizes  the  de- 
flected-slipstream technique.’  The  design  is  sponsored  in  the  U.S.  as  the  McDonnell  Douglas  188,  with  a 
52  to  64  passenger  capability.  During  March-May,  1969,  the  civil  air  carrier  version  was  evaluated  by 
American  Airlines,  and  had  previously  been  evaluated  for  air  carrier  consideration  by  Eastern  Airlines 
[Tryckare,  1970;  Newman,  1976  (66,  56)]. 

In  Germany  Lufthansa  and  the  Federal  Ministry  of  Defense  prepared  in  1973  skeleton  requirements  for 
a V/STOL  transport  aircraft  for  service  in  the  1980’s.  Dornier,  in  1969,  had  reported  considerable  success 
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with  the  Do  31  E experimental  V/STOL  aircraft,  and  had  designed  several  STOL  jet  transports  having  high 
cruising  speed  and  STOL  or  VTOL  capability.  In  cooperation  with  NASA,  a Dornier-NASA  program  included 
extensive  flight  testing  at  Oberpfaffenhofen  with  two  Do  31  E-l  aircraft  and  one  Do  31  E-3  aircraft,  and 
NASA  simulation  studies  at  Ames  Research  Center,  California.  In  1969  Eastern  Airlines  became  the  first 
international  airline  to  organize  for  V/STOL  transport  systems. 

As  a result  of  the  experimental  Do  31  E tests,  Dornier  designed  the  Do  231  V-jet,  utilizing  bypass 
jets  for  propulsion,  supplemented  by  a large  number  of  independent  lift  engines  with  very  high  bypass  ratio 
for  the  V/STOL  phase.  This  unique  design  (Fig.  8)  is  envisioned  in  two  versions,  one  for  military  use 
with  800  km  (500  mi)  range  including  400  km  (250  mi)  at  low  level  with  10,000  kg  (22,000  lb)  military  pay- 
load,  and  a civil  transport  version  carrying  100  passengers,  four  stewardesses,  and  up  to  four  crew  on 
the  flight  deck.  The  engine  system  consists  of  two  RB.220  bypass  cruise  engines  mounted  on  pylons  on  the 
inboard  wing  sections,  and  12  RB. 202-25  lift  engines.  In  the  basic  design  the  passenger  cabin  takes  16 
rows  of  seats  with  6 seats  abreast.  The  evaluation  committee  of  the  German  Ministry  of  Economic  Affairs 
has  selected  the  Dornier  concept  as  the  most  promising  line  for  future  developments  [Dornier,  1974  (41)]. 


Fig.  8.  The  Dornier  Do  231  V/STOL  air  transport  design  for 
the  1980's  in  vertical  takeoff  and  landing  configuration  with 
lift  engine  doors  open  [Courtesy  Dornier  AG,  1974  (40)]. 


1.3.8  Military  Advanced  Airborne  Command  Post.  Advanced  aircraft  such  as  those  discussed  in  this 
section  may  also  pose  new  human  factors,  crash  impact,  and  emergency  egress  problems.  Some  military  trans- 
ports may  present  special  emergency  egress  problems,  such  as  the  USAF  Boeing  747-E4A  Advanced  Airborne 
Command  Post  [Taylor,  1975  (65)],  which  primarily  utilizes  conventional  seating  rather  than  state-of-the- 
art,  as  shown  in  Fig.  9. 
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Fiq.  9.  USAF  Boeinq  747-E4A  Advanced  Airborne  Command  Post  Design  [Aviation  Week, 
1974  (32)]. 


Because  the  basic  desiqn  state  is  the  point  at  which  "people  packaging"  and  safety  factors  should  be 
considered,  one  objective  of  this  study  has  been  to  pull  together  and  provide  an  assessment  of  the  status 
of  current  relative  technology.  Some  of  the  concepts,  devices,  or  techniques  discussed  here  should  be 
considered  for  retrofit  on  current-generation  aircraft  (smoke  hoods,  improved  seat  restraint  systems,  emer- 
gency illumination,  etc.).  Others  should  be  considered  for  future  aircraft  (such  as  heat  shielding,  ad- 
vanced passive  restraint  systems,  in-flight  emergency  escape  systems,  high-energy  emergency  egress  systems, 
etc.).  While  this  study  has  not  attempted  to  include  air  transport  helicopter  or  rotorcraft,  many  of  the 
concepts  considered  would  have  equal  applicability  to  such  vehicles,  although  some  different  problems 
exist  in  crash  impact  as  well  as  emergency  egress. 
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2.  AIR  TRANSPORT  ACCIDENT  EXPERIENCE 


The  state-of-the-art  of  protection  and  survival  technology  is  constantly  changing  as  new  materials, 
techniques,  innovations,  and  requirements  are  developed.  Nevertheless,  the  most  valid  data  for  determining 
future  requirements  and  projecting  most  effective  concepts  in  crash  impact  and  emergency  egress  are  derived 
from  past  and  current  field  performance.  Accident  investigation  often  results  in  discovering  eqress  prob- 
lems, determining  human  factors  considerations,  and  pointing  out  potential  areas  of  future  concern.  How- 
ever, not  all  accidents  are  investigated  fully  for  human  factors  aspects.  Emergency  equipment  and  escape 
device  performance  under  actual  crash-fire  conditions  involving  aircraft  occupants  in  panic  may  differ 
considerably  from  predictions  developed  in  non-stress  laboratory  environments.  Similarly,  concepts  which 
appear  feasible  in  theory  may  not  be  in  fact. 

2.1  Sources  and  Limitations  of  Data 


This  section  reviews  the  accident  experience  of  NATO*  countries  with  respect  to  air  transport  acci- 
dents, as  a basis  for  more  clearly  understanding  past  and  current  causes  for  occupant  fatalities  and  de- 
termining priorities  of  greatest  needs  for  technological  improvements.  While  an  attempt  has  been  made  to 
include  all  civil  air  carrier  accidents  of  NATO  countries  for  the  period  1964-1974  (as  well  as  preliminary 
reports  for  1975),  it  has  been  found  difficult  to  precisely  determine  every  case  with  accuracy,  since  ac- 
cidents occurring  outside  the  country  of  registry  may  or  may  not  be  included.  Even  utilizing  the  comput- 
erized printouts  of  the  NTSB  for  the  U.S.  has  shown  some  apparent  discrepancies  (e.g.,  the  U.S.  registry 
DC-9  operated  by  Antilliaanse  Luchtvaart  Maatschappij  N.V.  [ALM]  of  Curacao,  on  lease  to  ALM  from  Overseas 
National  Airways,  Inc.,  a U.S.  certified  supplemental  air  carrier,  which  ditched  in  the  ocean  30  miles 
(4B  km)  ENE  of  St.  Croix,  Virgin  Islands,  2 May,  1970  [10-12],  is  apparently  listed  on  U.S.  records  as  a 
general  aviation  accident,  rather  than  as  an  air  carrier  accident). 

Listing  of  aircraft  accident  injury  data  can  be  deceptive  in  drawing  conclusions  if  only  the  tabu- 
lated results  are  used  and  the  environmental  content  is  not  clear.  For  this  study  an  attempt  was  made  to 
review  each  individual  air  carrier  accident,  and  those  reports  available  were  reviewed,  as  well  as  the  hu- 
man factors  group  reports  where  they  existed.  However,  particular  difficulty  was  encountered  in  attempting 
to  identify  how  fatalities  and  injuries  occurred  in  individual  accidents.  In  many  cases  there  either  was 
no  human  factors  determination  in  the  investigation,  or  else  cause  of  trauma  was  not  indicated.  Thus  an 
evaluation  of  occupant  survival  in  many  cases  is  not  possible  based  upon  the  reports  available.  However, 
some  cases,  particularly  in  recent  years,  have  sufficient  information  relative  to  injuries  so  that  causes 
may  be  clearly  identified.  One  objective,  that  of  separating  out  and  identifying  occupant  injury  causa- 
tion, was  not  found  possible  to  attain  in  a large  number  of  reported  accidents,  due  to  the  lack  of  human 
factors  documentation. 

Basic  sources  included  data  from  the  International  Civil  Aviation  Organization  (ICAO),  Aircraft 
Accident  Digest  [1975  (109,  299)],  the  World  Airline  Accident  Summary  of  the  United  Kingdom  CTvTT AvTation 
Authority  (98-100),  the  U.S.  National  Transportation  Safety  Board  and  Civil  Aeronautics  Board  (10-12;  B5- 
97;  119-2BB;  310-329;  331-340;  344,  345;  355-363;  371-373;  409-420;  430-435),  including  a copy  of  the  mag- 
netic tape  computer  files  of  all  accidents  since  1964,  the  International  Register  of  Civil  Aircraft  (72), 
the  annual  aircraft  accident  statistical  summaries  of  the  Ministry  of  Transport,  Canada  (110-118),  and 
the  multitude  of  individual  aircraft  accident  investigation  reports  available. 

A larqe  number  of  supplementary  sources  were  also  utilized,  including  the  Aircraft  Accident  Digest 
[ICAO  (109;  299)],  NTSB  preliminary  accident  resume  reports  (for  1975  data),  individual  investigation  re- 
ports  provided  in  Aviation  Week  and  Space  Technology,  The  World  Aviation  Directory  [Dean,  1975  (101)], 

Flight  Safety  FocuT  (London)  (293),  FAA  reports  (43,  44;  104-107;  306,  307),  various  annual  reports  of 
governmental  agencTes,  and  summary  reports,  special  studies,  and  human  factors  reports  made  available  by 
the  NTSB.  Additional  general  sources  of  precise  technical  information  included  Aerospace  Facts  and  Figures 
1975/76  (70),  Commercial  Aircraft  of  the  World  [Hofton,  1975  (51)],  Jane's  All  the  World's  Aircraft  [Taylor, 
1959-1975/76  (64;  65;  291)],  International  Aerospace  Specification  TaTbles  [1975  (76)1,  The  Lore~o7~^igjU 
[Tryckare,  1970  (66)],  Jane's  Pock  e t Boo  k of  Comme rc i a V T ran  sport  A i "r  c raTt  [Taylor  & Munson,  1973  (292)J, 
as  well  as  the  Air  Force/NASA  Design  Handbook  series  tUSAF,  1974  (29B)]7Tnd  other  military  and  manufac- 
turers' technical  specifications  and  publications. 

2.2  Air  Transport  Fatality  Data 

ICAO  data  indicate,  as  shown  in  Table  I,  that  for  the  period  1950  to  1974  there  have  been  734  acci- 
dents involving  scheduled  air  services  on  a world-wide  basis,  resulting  in  IB, 377  fatalities  [ICAO,  1975 
(109)].  These  figures  include  119  countries  but  exclude  People's  Republic  of  China,  and  excluded  USSR 
until  November,  1970.  This  is  an  average  of  735  deaths  per  year  on  scheduled  airlines  for  this  24-year 
period,  with  the  average  increasing  to  1,402  deaths  per  year  in  1962,  and  to  1,382  (preliminary  data)  in 

1974  (299).  Note,  however,  that  crew  fatalities  were  excluded. 

In  operations  of  U.S.  air  carriers  from  1964  through  1974  there  were  6B4  accidents  reported,  of  which 
109  were  fatal  accidents,  with  2,797  fatalities  for  this  most  recent  10-year  period  [National  Transporta- 
tion Safety  Board,  1972  (213);  1975  (280)].  During  1974  U.S.  scheduled  air  carriers  were  involved  in  47 
accidents,  including  9 fatal  accidents,  and  totaling  467  fatalities  [National  Transportation  Safety  Board, 

1975  (280)].  This  was  more  than  double  the  1973  total  of  227  fatalities,  and  in  the  case  of  U.S.  sched- 
uled air  carrier  operations  the  death  toll  was  the  highest  since  the  499  recorded  in  1960.  Fig.  10  pro- 
vides accident  data  from  1964  through  1974. 


* Includes  aircraft  accidents  of  Belgium,  Canada,  Denmark,  France,  West  Germany,  Greece,  Iceland,  Italy, 
Luxembourg,  Netherlands,  Norway,  Portugal,  Turkey,  United  Kingdom,  and  United  States. 
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TABLE  I. 

WORLD-WIDE  AIRCRAFT  ACCIDENTS  INVOLVING  PASSENGER  FATALITIES 
ON  SCHEDULED  AIR  SERVICES,  1950-1974 


Year 

Air- 

craft 

Acci- 

dents 

Passen- 

gers 

Killed 

Passenger 

Fatalities 

Per  100  million 
Pass. Km  Pass. Mi 

Fatal  Accidents 

Per  100  million  Per  100,000 
Km  Mi  Aircraft 

Flown  Flown  Hrs  Ldqs 

1950 

27 

551 

1.97 

3.15 

1.88 

3.02 

0.54 

1951 

20 

443 

1.27 

2.01 

1.23 

1.99 

0.35 

1952 

21 

386 

0.97 

1.54 

1.18 

1.90 

0.34 

1953 

28 

356 

0.77 

1 .25 

1.44 

2.32 

0.43 

1954 

28 

443 

0.85 

1.36 

1.36 

2.19 

0.42 

1955 

26 

407 

0.67 

1.07 

1.14 

1.82 

0.36 

1956 

27 

0) 

552 

0.78 

1.25 

1.06 

1.71 

0.34 

1957 

31 

507 

0.62 

0.99 

1 .09 

1.76 

0.36 

1958 

30 

609 

0.72 

1.15 

1.02 

1.65 

0.34 

1959 

28 

613 

0.63 

1.00 

0.91 

1.46 

0.31 

1960 

34 

0) 

873 

0.80 

1.29 

1.09 

1.76 

0.40 

0.52 

1961 

25 

805 

0.69 

1.11 

0.80 

1.29 

0.31 

0.38 

1962 

29 

778 

0.60 

0.97 

0.90 

1.44 

0.37 

0.44 

1963 

31 

715 

0.49 

0.78 

0.90 

1.46 

0.39 

0.46 

1964 

25 

616 

0.36 

0.58 

0.68 

1.09 

0.30 

0.35 

1965 

25 

684 

0.35 

0.56 

0.61 

0.98 

0.29 

0.33 

1966 

32 

O) 

1001 

0.44 

0.70 

0.69 

1.12 

0.33 

0.40 

1967 

30 

678 

0.25 

0.40 

0.57 

0.91 

0.29 

0.35 

1968 

35 

912 

0.29 

0.47 

0.58 

0.94 

0.32 

0.38 

1969 

32 

946 

0.27 

0.43 

0.48 

0.77 

0.27 

0.34 

1970 

30 

786 

0.17 

0.27 

na 

na 

na 

na 

1971 

33 

975 

0.20 

0.32 

na 

na 

na 

na 

1972 

44 

(2) 

1402 

0.25 

0.41 

na 

na 

na 

na 

1973 

35 

957 

0.15 

0.25 

na 

na 

na 

na 

1974* 

28 

1382 

0.21 

0.34 

na 

na 

na 

na 

Total s 

734 

18377 

Source:  ICAO,  1975  (109)  Does  not  include  aircrew. 

Data  exclude  People's  Republic  of  China,  includes  USSR  only  from  1970. 


* 1974  preliminary  data. 

(1)  Includes  a mid-air  collision  counted  as  one  accident. 

(2)  Includes  two  mid-air  collisions  shown  as  one  accident, 
na  Not  available. 
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Similarly,  the  fatal  accident  rate  has  increased  in  each  of  the  last  three  years  from  the  0.94  per 
100,000  hour  rate  achieved  in  1971.  The  1974  rate  was  the  highest  since  1968.  The  passenger  fatality 
rate  in  certified  route  carriers'  scheduled  domestic  and  international  passenger  service  has  also  shown 
an  upward  trend.  The  NTSB  reports  that  from  a record  low  of  0.001  passenger  fatalities  per  100  million 
passenger  miles  flown  in  1970,  this  rate  fluctuated  to  0.119  in  1971  and  0.100  in  1972,  rising  to  0.115 
in  1973  and  0.256  in  1974,  the  highest  rate  in  ten  years  [National  Transportation  Safety  Board  Annual 
Report  to  Congress,  1975  (280)].  This  is  shown  in  Fig.  11. 


0.250 


Fig.  11.  Fatal  accident  rate.  All  U.S.  airline  flying. 

(Fatal  accidents  per  100,000  aircraft  hours.  Includes 
certified  route  and  supplemental  air  carriers.)  NTSB 
Annual  Report,  1975,  p.  6. 


Air  carrier  fatality  rates  may  be  compared  in  various  ways.  The  passenger  fatality  rate  per 
100,000,000  passenger  miles  has  been  tabulated  by  the  FAA  [Department  of  Transportation,  1970  (102)]  for 
comparison  among  passenger  automobiles  (2.3),  buses  (.22),  railroad  passenger  trains  (.07),  and  domestic 
scheduled  air  carriers  (.13).  If  fatality  rates  for  U.S.  general  aviation  are  calculated  on  a basis  of 
passenger  fatalities  (all  occupants),  the  fatality  rate  (for  1973)  was  15.1  per  108  miles  of  travel  (ex- 
cluding 3 suicides)  [FAA,  1975  (103)]  [Snyder,  1975  (289)].  Thus  the  U.S.  domestic  scheduled  air  carrier 
fatality  rate  is  still  on  the  order  of  43.5  times  less  than  that  of  the  automobile  (0.098  vs.  4.27),  and 
154  times  less  than  that  of  general  aviation  (0.098  vs.  15.1). 

The  current  U.S.  air  carrier  fleet  (1974)  consists  of  2,611  total  aircraft.  Table  II  lists  the  cur- 
rent U.S.  civil  air  carrier  inventory  as  an  indication  of  aircraft  presently  in  service  (and  thus  those 
which  will  be  principally  involved  in  accidents  over  the  coming  decade). 

During  the  past  ten  years  an  average  of  414  crew  and  passengers  per  year  have  received  fatal  in- 
juries in  combined  NATO  countries  (excluding  U.S.)  air  carrier  accidents.  Of  372  accidents  during  this 
period,  96,  or  25.8%,  have  been  fatal  accidents.  Table  III  illustrates  the  summary  data  relative  to  fa- 
talities, injuries,  and  accidents  for  both  aircrew  and  passengers.  Since  these  data  have  been  compiled 
from  several  sources,  they  do  not  represent  official  data  from  the  countries  involved  but  are  believed 
to  be  relatively  accurate. 
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TABLE  II. 

U.S.  AIRLINE  FLEET 

TYPE  OF  AIRCRAFT,  NUMBER  OF  ENGINES  AND  MODEL 
(Number  of  Aircraft  as  of  1 Jan.,  1974) 


Type  of  Aircraft,  Number  of  Engines 
and  Model  _____ 


TOTAL  FIXED-WING 2,598 

Turbine-Powered,  Total  2,461 

Four-Engine,  Total  824 

Turbojet,  Total  750 

Boeing  707  316 

Boeing  720  45 

Boeing  747  Ill 

Convair  880  37 

Convair  990  8 

McDonnell  Douglas  DC-8  233 

Lockheed  L-1329  

Turboprop,  Total  74 

Armstrong  Whitworth  AW-650  ... 

Boeing  377S 1 

Canada! r CL-44  

Lockheed  188 53 

Lockheed  382  20 

Three-Engine  Turbojet,  Total  . . . 872 

Boeing  727  733 

Lockheed  L - 1 011  48 

McDonnell  Douglas  DC-10  ....  91 

Twin-Engine,  Total  765 

Turbojet,  Total  535 

Boeing  737  152 

British  Aircraft  Corp.  BAC-111  . 43 

Dassault  MD-20  

McDonnell  Douglas  DC-9  .....  340 

Hamburger  Flugzeugbau  HF-320  . . 

Turboprop,  Total 230 

Aero  Commander  AC-680-V  ....  1 

Beech  99  

Convair  580  105 

Convair  600,  640  32 

DeHavi 1 1 and  DHC-6  9 

Fairchild  F-27 25 

Fairchild  FH-227  31 

Grumman  G-l 59  1 


Type  of  Aircraft,  Number  of  Engines 
and  Model 


Hawker  Siddeley  HS748  1 

Nihon  YS-11 23 

Short  SC-7 2 

Piston-Powered,  Total  137 

Four-Engine,  Total 42 

Boeing  377  1 

Douglas  DC-4 4 

Douglas  DC-6 31 

Douglas  DC-7 5 

Lockheed  749  

Lockheed  1049/1649  1 

Twin-Engine,  Total  81 

Aero  Commander  500  1 

Aero  Commander  680E  

Cessna  402  2 

Convair  240  

Convair  340/440  6 

Curtiss  CW-46  30 

Douglas  DC-3 12 

Fairchild  FC-82  2 

Grumman  G-21  6 

Grumman  G-44 1 

Grumman  G-73 1 

Martin  202  

Martin  404  18 

Other 2 

Single-Engine,  Total  14 

TOTAL  ROTARY  WING 13 

Turbine-Powered,  Total  10 

Sikorsky  S-61 7 

Bell  BL-206  3 

Piston-Powered,  Total  ......  3 

Sikorsky  S-58C  3 

TOTAL  AIRCRAFT 2,611 


Source:  FAA  (106);  and  Aerospace  Facts  and  Figures,  pp.  76-77,  1975  (71). 


TABLE  III. 

COMBINED  NATO  COUNTRIES  CIVIL  AIR  TRANSPORT  ACCIDENTS  (EXCLUDING  U.S.) 


Year 

No . 
Acci  - 
dents 

Fatal 
Acci  - 
dents 

Total 

Occu- 

pants 

Injuries 

Flight 

Deck  Crew 

Pass 

Fatal ities 

Flight 

Deck  Crew 

Pass 

1964 

36 

7 

(5) 

1285+ 

2 

0 

26 

23 

11 

234 

1965 

32 

6 

(4) 

1227+ 

2 

1 

0 

15 

8 

105 

1966 

29 

9 

(4) 

1194+ 

2 

0 

30 

30 

23 

408 

1967 

40 

10 

(6) 

1481  + 

4 

0 

13 

21 

15 

243 

1968 

31 

10 

(3) 

1406+ 

6 

7 

136 

17 

16 

221 

1969 

39 

11 

(6) 

1445+ 

10 

9 

47 

19 

28 

587 

1970 

41 

10 

(5) 

2186+ 

0 

7 

98 

14 

11 

249 

1971 

24 

6 

(2) 

892+ 

11 

2 

118 

9 

11 

99 

1972 

43 

13 

(4) 

1830+ 

7 

0 

29 

27 

19 

513 

1973 

29 

7 

1644 

5 

6 

36 

18 

9 

382 

1974 

28 

7 

2331 

5 

1 

29 

10 

10 

529 

TOTALS 

372 

96 

16921 

54 

34 

562 

203 

371 

3570 

650  4144 


(2) , (3) , (4) , (5) , (6)=Total  occupants  unknown  for  2, 3, 4, 5,  or  6 number  of  accidents  listed  that  year. 
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2.2.1  In-Flight  Hazards.  Although  occupant  crash  impact  protection  and  emergency  egress  aspects  of 
air  carrier  accidents  are  usually  considered  in  relation  to  a crash  landing  environment,  there  are  a num- 
ber of  in-flight  environments  which  also  require  occupant  protection.  The  following  sections  briefly  in- 
dicate the  nature  and  extent  of  some  of  the  more  common  in-flight  hazards  which  may  result  in  injuries  to 
passengers  or  crew. 


2. 2. 1.1  Mid-Air  Collision.  There  have  been  a number  of  studies  of  mid-air  collisions  (300- 
330).  However,  unlikethe  first  documented  mid-air  collision  (on  2 October,  1910  at  Milan,  Italy,  when  a 
French  Antoinette  flown  by  Rene  Thomas  collided  with  U.K.  Captain  Dickson's  Henri  Forman  [Gibbs-Smith, 

I960  (308)],  resulting  in  non-fatal  injuries  to  both),  the  number  of  aircraft  occupants  per  aircraft,  and 
resulting  chance  of  major  disaster  has  greatly  increased.  One  1973  study  conducted  by  the  Mitre  Corpora- 
tion for  the  FAA  Office  of  Systems  Engineering  Management,  reviewed  all  mid-air  collisions  occurring  over 
the  continental  United  States  during  an  eight-year  period,  1964  through  1971  [Simpson  et  al . , 1973  (330)]. 
During  this  period  there  were  12  mid-air  collisions  involving  air  carrier  aircraft,  with  239  fatalities. 
Despite  constantly  increasing  annual  levels  of  aviation  activity,  which  doubled  during  the  time  of  the 
Simpson  study,  the  statistical  risk  of  mid-air  collision  per  flight  hour  did  not  significantly  change. 

The  authors  did  not  indicate  what  trend  would  be  shown  if  alternative  units  of  risk  were  utilized  in  the 
statistical  analysis.  However,  with  forecasts  of  three-  to  five-fold  increase  in  annual  operations  fore- 
cast over  the  next  10  to  20  years  (305;  306),  this  risk  may  well  increase.  In  1968  there  were  2,230  near- 
mid-air  collisions  (NMAC)  reported  to  the  FAA,  1,128  of  which  were  classified  as  "hazardous,"  and  317 
"critical"  (i.e.,  the  miss  was  "due  to  chance,  with  no  time  for  evasive  action")[FAA,  1969  (305)].  From 
1969  through  1971  the  FAA  granted  immunity  from  enforcement  action  to  persons  reporting  near-mid-air  col- 
lisions to  encourage  full  reporting  of  such  incidents  [FAA,  1971  (307)]. 

During  the  first  ten  months  of  1975  the  Federal  Aviation  Administration  has  reported  207  "hazardous" 
near-collisions  of  U.S.  aircraft,  125  of  which  involved  a scheduled  air  carrier  and  a military  or  general 
aviation  aircraft,  and  61  of  which  involved  only  air  carriers  [McLucas,  1975  (309)].  However,  interpreta- 
tion of  this  report  has  been  varied,  with  the  United  Press  International  reporting  "158  near-collisions," 
and  one  technical  publication  stating  that  there  were  "210  reports  of  near-collisions,  40  involving  air 
transport  aircraft"  (303). 

On  5 March,  1974,  a mid-air  collision  occurred  between  an  Iberia  McDonnell  Douglas  DC-9  and  a Spantax 
Convair  990  near  Nantes,  France  (both  aircraft  were  of  Spanish  registry).  Seven  crew  members  and  61  pas- 
sengers on  the  Iberia  flight  were  killed,  and  the  aircraft  destroyed.  Although  the  Spantax  aircraft  in- 
curred substantial  damage,  there  were  no  reported  injuries  to  occupants.  This  accident  was  investigated 
by  the  Commission  of  Inquiry  appointed  by  the  French  Secretariat  of  State  for  Transport  (301).  One  of  the 
most  well -publ ici zed  was  the  recent  near-collision  on  26  November,  1975  between  an  American  Airlines 
McDonnell  Douglas  DC-10  with  194  aboard,  and  a Trans  World  Airlines  Lockheed  L-1011  at  10,700  m (35,000  ft) 
over  Michigan.  A report  of  this  near-collision  and  review  of  the  mid-air  problem  is  expected  to  be  pub- 
lished by  the  NTSB  in  late  February,  1976.  At  the  time  of  the  unplanned  emergency  descent  of  the  American 
flight,  the  seat  belt  sign  was  on  and  a meal  was  being  served.  It  was  reported  that  all  unsecured,  or  in- 
adequately secured,  occupants  and  objects  floated  to  the  ceiling  and  then  fell  to  the  floor.  As  a result, 
24  individuals,  including  10  cabin  attendants,  were  injured.  Three  passengers  received  serious  injuries 
(328).  Nine  days  later,  on  6 December,  1975,  a Trans  World  Airlines  air  carrier  with  77  persons  aboard 
reportedly  narrowly  missed  ("within  50  feet  [15  m],"  according  to  a passenger)  colliding  at  6,400  m (21,000 
ft)  with  a United  Airlines  flight  carrying  60  passengers  [Associated  Press,  1975  (302)]. 

Evasive  action  to  avoid  a mid-air  collision  also  may  cause  injuries.  Serious  injury  (fractured  an- 
kle) to  a passenger  resulted  when  an  American  Airlines  Boeing  707  was  descending  to  land  at  Phoenix,  Ari- 
zona on  10  December,  1974.  Although  the  seat  belt  sign  was  on  at  the  time,  this  passenger  was  returning 
to  her  seat  from  the  lavatory  [NTSB,  1974  (324)].  A listing  of  other  injuries  as  a result  of  evasive 
maneuvers  may  be  found  in  a 1973  NTSB  special  study  (331).  Among  the  1975  mid-air  collisions,  a Golden 
West  Airlines  de  Havilland  Twin  Otter  collided  with  a Cessna  150  near  Whittier,  California,  with  fatalities 
to  all  14  occupants  of  both  aircraft  [NTSB,  1975  (327)]. 

2. 2. 1.2  Turbulence.  Injuries  due  to  in-flight  turbulence  are  not  infrequent.  In  most  situ- 
ations the  injury  could  have  been  prevented  had  the  injured  passenger  or  aircrew  been  restrained.  However, 
stewardesses  are  particularly  vulnerable  to  unexpected  encounters  with  violent  turbulence  since  they  often 
have  to  remain  on  their  feet  to  conduct  their  duties. 

In  1974  an  Air  France  Boeing  707  B-328B  enroute  to  Paris,  France  from  Los  Angeles  encountered  mod- 
erate to  severe  turbulence  at  10,050  m (33,000  ft)  near  O'Neill,  Nebraska,  which  lasted  some  45  minutes. 

Two  flight  attendants  and  13  passengers  were  injured,  including  serious  injuries  to  two  passengers  and 
one  flight  attendant.  An  elderly  lady  received  a fractured  ankle  and  an  elderly  male  passenger  incurred 
a dislocated  knee,  a possible  fracture,  and  other  injuries.  Twelve  of  the  passengers  had  been  standing  at 
the  rear  of  the  aircraft  making  duty-free  purchases  or  waiting  to  use  the  lavatories,  and  were  thrown  about 
when  the  turbulence  was  first  encountered  (282).  During  1975  a number  of  injuries  from  this  cause  have 
already  been  reported.  Several  random  U.S.  cases  including  17  injuries  have  been  selected  from  preliminary 
NTSB  investigations  to  illustrate  this  problem  (see  Table  IV),  although  these  do  not  represent  the  total 
cases  for  1975.  Each  case  involved  sudden  violent  turbulence,  and  the  last  case  was  thought  to  be  attri- 
buted to  wake  turbulence  from  a preceding  wide-bodied  air  carrier. 

In  a special  study,  the  NTSB  has  reported  that  during  the  period  1968-1971,  95  stewardesses  and  241 
passengers  were  injured  due  to  turbulence  in  70  air  carrier  accidents  reported  [NTSB,  1973  (331)].  This 
involved  116  individuals  receiving  injuries  of  a serious  nature  and  220  individuals  reporting  minor  in- 
juries, as  listed  in  Table  V. 
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TABLE  IV. 

INJURIES  DUE  TO  IN-FLIGHT  TURBULENCE,  1975 
(Incomplete) 


Type  of  Injuries 

Date  Ai rl  i ne  Aircraft  Stewardess  Passenger  Comments  Reference 


21  March 

Flying  Tiger 

McDonnel 1 

Douglas 

DC-8-63F 

1 

1 

Serious  injury  (frac-  (332) 

tured  kneecap)  to  stew- 
ardess; passenger  wrenched 
neck. 

20  May 

Frontier 

Convair  580 

1 

Stewardess  thrown  from  (333) 

feet  and  struck  protru- 
sion on  passenger  seat 
with  back,  knocked  uncon- 
scious; serious  injury. 

12  July 

Trans  World 

Boeing  707 

1 

Female  passenger  frac-  (334) 

tured  ankle  coming  out 
of  lavatory  and  thrown  in- 
to air;  serious  injury. 

28  July 

Air  France 

Boeing  707 

1 

Stewardess  sustained  se-  (335) 
rious  injury  (fractured 
leg). 

3 August 

Del  ta 

Me  Donne 1 1 

Douglas 

DC-9 

2 

3 

Minor  injuries.  (336) 

8 August 

Delta 

McDonnell 

Douglas 

DC-8-51 

1 

Serious  injury  (frac-  (337) 

tured  vertebrae)  to  stew- 
wardess  when  thrown  to 
floor  from  seat  (in  pro- 
cess of  securing  restraint). 

15  September 

Pan  Am 

Boeing  747 

1 

Female  passenger  received  (338) 
serious  injury  (compound 
fracture  of  leg)  exiting 
from  lavatory. 

22  September 

Del  ta 

McDonnell 

Douglas 

DC-8-51 

2 

Two  female  passengers  (339) 

were  in  lavatories;  one 
aged  78  received  serious 
injury  (fractured  right 
ankle),  the  other  received 
minor  injuries  to  knee  and 
finger. 

3 November 

Trans  Inti . 

McDonnel 1 

Douglas 

DC-10 

1 

2 

Serious  injuries  to  two  (340) 
passengers  and  minor  in- 
jury to  one  stewardess. 

TABLE  V. 

INJURIES  ATTRIBUTED  TO  TURBULENCE  IN 
U.S.  AIR  CARRIERS,  1968-1971 


Reported 
Year  Accidents 


1968 

20 

1969 

19 

1970 

16 

1971 

15 

Totals 

70 

Occupants 

Flight  Attendants 
Passengers 

Flight  Attendants 
Passengers 

Flight  Attendants 
Passengers 

Flight  Attendants 
Passengers 


Injuries 
Serious  Minor 


14 

12 

18 

44 

11 

24 

24 

59 

16 

7 

11 

40 

7 

4 

15 

30 

116 

220 

Source:  NTSB,  1973  (331) 
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2. 2. 1.3  Bird  Strikes.  An  example  of  another  in-flight  hazard  which  may  disable  an  air  car- 
rier involves  bird  strikes.  Van  Messel  (350)  in  a i960  study  noted  117  reported  bird  strikes  on  aircraft 
the  first  ten  months  of  that  year  in  Holland  alone.  Between  1964  and  1973,  63  accidents  were  attributed 
to  birds  in  the  U.S.,  17  involving  air  carriers  (348).  During  1975  Tokyo  International  Airport  reported 
19  cases  of  bird  strikes  on  air  carriers  (341)  (see  Fig.  12).  Several  tragic  consequences  have  occurred. 


Fig.  12,  An  air  carrier  taking  off  at  Tokyo  International  Airport  on  13  November,  1975  in  a 
flock  of  birds  (Photo  courtesy  Wide  World  Photos). 


In  1960  an  Eastern  Airlines  Lockheed  L - 1 88  Electra  was  disabled  on  takeoff  by  a flock  of  starlings  at 
Boston's  Logan  International  Airport,  resulting  in  62  fatalities  (349).  In  1962  a United  Airlines  Vickers 
Viscount  struck  birds  over  Maryland  that  damaged  the  horizontal  stabilizer,  resulting  in  13  fatalities 
(348).  More  recently,  on  12  November,  1975,  the  crash  of  an  Overseas  National  Airways  McDonnell  Douglas 
DC-10-30CF  was  attributed  to  ingestion  of  large  seagulls.  The  aircraft  was  destroyed  on  takeoff  at  J.F. 
Kennedy  International  Airport  in  New  York  [(342);  NTSB,  1975  (346)].  The  main  landing  gears  collapsed  as 
the  captain  attempted  to  turn  off  the  runway,  and  the  aircraft  settled  to  the  ground  enveloped  in  flames, 
destroying  the  aircraft  and  resulting  in  injuries  to  the  flight  deck  crew.  On  20  November,  1975,  Federal 
Aviation  Administration  Lockheed  L- 1 329  (Nl)  incurred  bird  strike  damage  to  number  four  engine  while  land- 
ing at  North  Philadelphia  Airport  [NTSB,  1975  (347)]. 

A 1969  accident  illustrates  several  of  the  problems  which  may  be  encountered  during  emergency  evacua- 
tion when  an  aircraft  lands  or  aborts  a takeoff  after  striking  birds,  even  when  smoke  or  fire  is  not  in- 
volved. On  1 December,  1969,  a Pan  American  Airways  Boeing  707  aborted  takeoff  at  Sydney,  Australia  after 
running  into  a flock  of  birds.  The  aisle  by  the  galley  was  blocked  by  the  in-flight  oven  being  dislodged 
into  the  aisle.  There  was  confusion  in  evacuation  instructions,  with  no  announcement  or  warning  made  from 
the  flight  deck,  yet  while  the  forward  cabin  attendants  were  evacuating  passengers,  the  person  in  the  rear 
used  the  public  address  megaphone  to  instruct  the  passengers  to  stay  in  their  seats.  The  rear  galley  exit 
was  blocked  by  a 95-year-old  woman  seated  next  to  the  exit  who  refused  to  move;  she  was  accompanied  by  her 
78-year-old  son,  neither  of  whom  spoke  English.  They  were  eventually  forced  down  a slide  [Australian  Air 
Safety  Investigation  Branch,  1969  (343)]. 

As  a result  of  the  1960  Lockheed  Electra  accident  and  another  incident  in  which  starling  ingestion 
caused  an  aborted  takeoff,  an  FAA/CAMI  study  was  conducted  by  Swearingen  and  Mohler  [1962  (349)]  to  deter- 
mine why  starlings  appeared  to  be  attracted  to  the  Lockheed  Electra.  It  was  found  that  the  Electra  sound 
spectrum  contains  an  audible  chirp  identical  in  frequency  and  wave  form  to  the  chirp  of  field  crickets, 
indicating  that  "the  starlings  are  attracted  to  the  Electra  by  being  misled  into  the  belief  that  there  is 
a field  of  crickets  at  the  source  of  the  Electra  noise"  [1962  (349)]. 

An  incident  has  been  reported  of  a bird  strike  at  2,440  m (8,000  ft)  in  which  a vulture  penetrated 
the  windshield  and  caused  fatal  injuries  to  the  copilot,  while  in  another  incident  a vulture  broke  through 
the  captain's  windshield  on  takeoff  and  caused  serious  injuries,  although  in  both  cases  the  aircraft  landed 
safely  [Khan,  lg66  (345)].  Dodds,  in  New  Zealand,  has  proposed  a number  of  measures  to  remove  the  bird 
hazard  on  airfields,  primarily  by  removing  sources  of  food,  letting  grass  grow  15  to  23  cm  (6  to  9 in) 
high,  providing  alternative  roosting  areas,  and  using  scaring  devices  in  a random  sequence  (distress  calls, 
mechanical  hawks,  shooting  and  pyrotechnics,  real  or  artificial  carcasses,  and  dogs)  [Dodds,  1966  (344)]. 

2. 2. 1.4  In-Flight  Explosion,  Fire,  or  Structural  Failure.  Unexpected  in-flight  explosions 
may  impair  controls  o r damage  the  structure  i rre vers i bl y , res ul t i ng  Tn  a fatal  crash,  or  may,  with  luck, 
be  survived  without  injury.  The  hazard  from  explosive  devices  purposefully  placed  in  civil  air  transport 
aircraft  remains  with  us  despite  the  effectiveness  of  NATO  airport  security  boarding  controls.  A number 
of  air  carrier  disasters  have  been  attributed  to  in-flight  explosions  in  recent  years.  One  which  occurred 
in  May  of  1962  involved  the  explosion  of  a dynamite  device  in  the  right  rear  lavatory  of  a Continental  Air- 
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lines  Boeing  707  cruising  at  11,900  m (39,000  ft)  over  Iowa,  causing  a violent  explosive  decompression. 

Two  minutes  later,  at  11,200  m (36,800  ft)  and  an  airspeed  of  508  km/hr  (315  mph)  (IAS)  the  empennage  and 
a 11.6  m (38  ft)  portion  of  the  rear  fuselage  separated,  the  subsequent  crash  resulting  in  45  fatalities. 
Since  one  passenger  was  found  alive  7 1/2  hours  post-impact  lying  across  a "triple"  forward- facing  seat, 
although  he  died  9 hrs,  20  min  post-impact  from  injuries  received,  this  accident  received  unusually  com- 
prehensive human  factors,  medical,  and  bio-engineering  analysis  as  reported  in  Aerospace  Medicine  [Dille 
& Hasbrook,  1966  (356)].  A similar  incident,  but  with  a stewardess  surviving  a 9, 450  m (31 ,000  ft)  fall, 
occurred  on  26  January,  1972.  This  in-flight  explosion  was  attributed  to  a terrorist-planted  bomb,  which 
fatally  disabled  a Yugoslav  Airlines  McDonnell  Douglas  OC-9  bound  from  Sweden  to  Yugoslavia,  with  27  fa- 
talities [Vulovic,  1972  (367)].  On  8 September,  1974  a Trans  World  Airlines  Boeing  707-331B  enroute  from 
Tel  Aviv  to  New  York  crashed  into  the  Ionian  Sea  with  88  fatalities  as  a result  of  "the  detonation  of  an 
explosive  device  within  the  aft  cargo  compartment  of  the  aircraft,  which  rendered  the  aircraft  uncontrol- 
lable" [NTSB , 1975  (357;  351;  352,  353)].  An  explosive  decompression  at  8,540  m (28,000  ft)  coincided 
with  the  explosion.  The  NTSB  indicated  that  the  "explosion  took  place  below  the  cabin  floor,  which  shield- 
ed the  cabin  occupants,"  thus  had  the  flight  not  been  disabled,  it  is  possible  that  this  accident  might 
have  been  survivable.  More  recently,  a Middle  East  Airline  Boeing  720B  crashed  1 January,  1976  in  a re- 
mote region  of  Saudi  Arabia,  killing  all  82  persons  on  board  [Aviation  Week,  1976  (355)].  While  this  ac- 
cident is  still  under  investigation  and  no  cause  has  been  determined,  the  Aircraft  reportedly  disappeared 
from  Beirut's  surveillance  radar  while  cruising  at  11,000  m (36,000  ft),  and  an  explosion  must  be  consid- 
ered. While  a number  of  other  in-flight  explosions  have  occurred,  these  cases  illustrate  the  high  fatality 
rate  presently  associated  with  such  accidents. 

When  in-flight  fires  occasionally  occur,  they  are  usually  readily  controlled.  However,  such  occur- 
rences can  result  in  a fatal  crash  or  lead  to  injuries.  For  example,  a Pan  American  Boeing  747  flight, 
enroute  from  Honolulu  to  Guam  on  17  November,  1974  at  an  altitude  of  610  m (2,000  ft)  after  takeoff,  ex- 
perienced a fire  warning  in  number  three  engine.  Although  the  engine  was  shut  down  and  one  extinguisher 
bottle  fired,  the  fire  persisted.  The  second  extinguisher  bottle  was  fired  but  the  engine  fire  still  con- 
tinued. The  aircraft  returned  to  Honolulu  and  landed,  and  the  fire  was  finally  put  out  by  the  ground 
crash  rescue  team.  Had  this  fire  occurred  later  in  the  flight  the  results  might  have  been  different.  In- 

cidentally, although  the  172  aboard  deplaned  successfully,  five  of  the  emergency  evacuation  slides  "failed 
to  function  either  partly  or  totally"  [NTSB,  1974  (358)].  Earlier  that  same  month  (5  November)  an  Alleghe- 
ny Airlines  McDonnell  Douglas  DC-9-31  experienced  an  electrical  fire  and  intense  smoke  in  flight,  16km  (lOmi) 
out  on  approach  to  Logan  International  Airport,  Boston,  and  was  able  to  land  successfully.  In  this  in- 
stance the  flight  deck  crew  and  cabin  attendants  were  unable  to  open  the  exit  doors  because  of  cabin  pres- 
surization and  some  two  minutes  elapsed  before  rescue  personnel  were  able  to  break  open  the  overwing  exits 

from  the  outside.  Emergency  egress  was  accomplished  primarily  through  the  overwing  exits  without  injury 
[NTSB,  1974  (359)]. 

Structural  failures  in  air  carrier  aircraft  may  occur  when  the  vertical  induced  velocities  exceed 
the  design  gust  limits  during  violent  maneuvers  incident  to  evasive  action,  loss  of  control,  overload  con- 
ditions, wake  turbulence,  extreme  up  and  down  drafts  (wind  shear),  clear  air  turbulence,  or  combinations 
of  these  and  other  causes.  A study  of  such  failures  over  a 10-year  period  in  general  aviation  aircraft 
has  been  published  by  Snyder  [1972  (366)].  While  explosion,  bird  strikes,  explosive  decompression,  mid- 
air collision,  and  fire  also  may  all  result  in  structural  failure,  there  is  still  another  category  in- 
volving failure  of  structure  in  the  absence  of  any  of  these  factors.  This  most  commonly  occurs  when  a 

portion  of  the  engine,  gear,  or  wing  control  surface  fails,  and  often  does  not  result  in  an  accident.  Oe- 

spite  the  relatively  excellent  safety  record  of  NATO  air  carriers,  such  failures  are  not  uncommon.  Since 
many  cases  of  structural  failure  of  an  aircraft  component  do  not  result  in  an  accident,  the  accident  briefs 
do  not  provide  an  accurate  indication  of  the  incidence  of  such  failures. 

Some  recent  examples  of  in-flight  structural  failures  include  the  National  Airlines  McDonnell  Douglas 
DC-10-10  accident  near  Albuquerque  on  3 November,  1973  when  the  fan  section  of  a General  Electric  CF6-6D 
turbofan  engine  failed,  resulting  in  an  explosive  decompression  and  passenger  fatality  when  he  was  sucked 
out  of  the  aircraft  after  the  fuselaqe  was  pierced  by  debris  [Aviation  Week,  1975  (354)].  Some  random  in- 
cidents during  June  through  September  of  1975  further  illustrate  this  hazard.  An  American  Airlines  Boeing 
727  flight  from  Los  Angeles  International  aborted  takeoff  on  24  July  with  subsequent  evacuation  when  the 
right  MLG  sway  brace  became  separated  from  its  attachment  at  the  shock  strut,  according  to  preliminary  in- 
vestigation [NTSB,  1975  (360)].  On  25  July  one  engine  on  a Continental  Airlines  McDonnell  Douglas  0C-10- 
10  was  shut  down  on  approach  to  Seattle  due  to  high  vibration.  Preliminary  investigation  subsequently  in- 
dicates this  was  attributed  to  deformation  and  separation  of  turbine  blades  [NTSB,  1975  (361)].  On  24 
August  a United  Airlines  Boeing  747  enroute  from  San  Francisco  to  Honolulu  incurred  an  in-flight  fire  to 
number  three  engine  at  10,670  m (35,000  ft),  and  after  landing  at  Honolulu  without  incident  it  was  found 
in  preliminary  inspection  that  a seventh-stage  compressor  rim  failure  had  occurred  [NTSB,  1975  (362)]. 

On  8 September  an  American  Airlines  Boeing  747-123  was  on  final  approach  to  the  San  Juan  International  Air- 
port, Puerto  Rico,  "when  the  outboard  section  of  the  left  inboard  trailing  edge  foreflap  separated  from 
its  attachment,  struck  the  left  side  of  the  fuselage,  and  fell  to  the  ground,"  according  to  preliminary 
investigation.  However,  although  one  passenger  reportedly  sustained  minor  head  contusions,  the  aircraft 
was  landed  with  no  apparent  difficulty  [NTSB,  1975  (363)].  A Trans  World  Airlines  Boeing  747,  taking  off 
from  London  on  11  September,  experienced  failure  of  the  tire  and  part  of  the  wheel  assembly  which  sepa- 
rated and  struck  both  left  and  right  body  gear  wheel  well  doors  and  gouged  the  fuselage,  according  to 
preliminary  investigation,  although  this  flight  continued  to  Chicago  and  landed  without  incident  [NTSB, 

1975  (364)].  On  14  September  the  number  four  engine  forward  thrust  reverse  panel  separated  from  the  en- 
gine ten  minutes  after  takeoff  of  a Trans  World  Airlines  Boeing  707-1 31 B from  Edwardsville,  Illinois  [NTSB, 
1975  (365)].  These  examples  from  a three-month  period  during  1975  indicate  the  nature  of  such  failures; 
those  which  attributed  to  accidents  can  be  found  by  referring  to  the  Appendices. 

2. 2. 1.5  Explosive  Decompression.  Another  in-flight  hazard  which  occurs  frequently  on  sched- 
uled airlines  involves  rapid  or  explosive  decompression.  However,  such  incidents  are  usually  reported  to 
the  FAA  only  in  the  form  of  a "Mechanical  Reliability  Report"  (MRR),  so  neither  the  actual  number  of  oc- 
currences nor  their  potential  consequences  are  often  publicly  recorded.  Study  of  this  problem  is  current- 
ly underway  as  of  January,  1976,  by  the  Human  Factors  Branch  of  the  Bureau  of  Safety,  National  Transporta- 
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tion  Safety  Board.  An  idea  of  the  number  of  decompressions  is  seen  in  the  253  which  occurred  in  the  26- 
month  period  between  May,  196B  and  June,  1970  [FAA,  1971  ( 36B) ] . "In  house"  studies  by  the  Federal  Avia- 
tion Administration  indicate  that  at  least  27  decompressions  occurred  on  U.S.  scheduled  air  carriers  dur- 
ing 1972,  of  which  at  least  4 were  explosive,  and  34  decompressions,  of  which  7 were  explosive,  occurred 
in  1973  [FAA,  1974  (369);  see  also  Mohler  et  al . , 1969  (370)].  The  National  Airlines  McDonnell  Douglas 
DC-10  explosive  decompression,  which  resulted  in  a fatality  when  a passenger  was  sucked  out  the  fractured 
fuselage  window  at  11,900  m (39,000  ft)  near  Albuquerque  in  November,  1973  [NTSB,  1975  (372)],  and  the 
McDonnell  Douglas  DC-10  explosive  decompression  near  Detroit  on  12  June,  1972  [NTSB,  1973  (371)],  are  good 
examples  of  near-disasters.  One  of  the  most  recent  incidents  occurred  on  27  December,  1975  when  a Capitol 
Airways  International  McDonnell  Douglas  DC-10,  approaching  Oakland  from  Honolulu  at  9,750  m (32,000  ft), 
experienced  a decompression  resulting  in  the  hospitalization  of  10  of  183  passengers  and  crew  [NTSB,  1976 
(373)].  Fatalities  to  175  of  330  occupants  in  a USAF  Lockheed  C-5A  transport  crash  occurred  4 April,  1975 
in  Saigon,  when  aft  cargo  door  lock  failure  displaced  1 ,B46  cu  m (65,000  cu  ft)  of  air  in  less  than  1 sec- 
ond, severing  empennage  controls.  A decompression  was  probably  responsible  for  the  worst  crash  in  history 
when  on  5 March,  1974  a Turkish  Turk  Hava  Yollari  McDonnell  Douglas  DC-10,  climbing  through  3,962  m (13,000 
ft)  after  takeoff  from  Paris  blew  out  the  left  rear  freight  door,  resulting  in  345  fatalities  (100).  Injury 
to  passengers  (and  cabin  crew)  can  occur  not  only  as  a result  of  the  rapid  or  explosive  decompression  event 
or  subsequent  structural  consequences,  but  also  in  any  resulting  emergency  descent. 

Examination  of  current  decompression  experience  should  be  considered  also  in  light  of  projected  re- 
quirements, and  for  those  aircraft  already  having  service  ceilings  of  13,720  m (45,000  ft)  (such  as  the 
Gates  Learjet  23/24/25  business  jet  transport  series)  to  the  IB, 000-18, 290  m (59,000-60,000  ft)  service 
ceilings  of  the  USSR  Tupolev  Tu-144  or  Aerospatiale/British  Aircraft  Corporation  Concorde  supersonic 
transports.  For  passenger  flights  above  the  12,200-15,250  m (40,000-50,000  ft)  levels,  as  has  been  point- 
ed out  by  Mohler  (1970),  careful  precautions  are  required  with  respect  to  (1)  preventing  pressurization 
malfunctions  and  (2)  providing  appropriate  occupant  protection  in  the  event  of  pressurization  loss  (370). 
Significant  factors  are  oxygen  mask  features,  donning  times,  passenger  and  cabin  attendants'  response, 
descent  procedures,  the  cabin  environmental  compressor  capabilities,  and  the  aircraft  descent  limitations. 
Mohler  has  provided  a series  of  "critical  cabin  altitude"  curves  for  passengers  which  have  been  tested  in 
the  Civil  Aeromedical  Institute  (FAA)  altitude  chamber.  Proposed  changes  in  the  FAR's  are  presently  under 
discussion  (1975). 


2.2.1 .6  Takeoff  and  Landings.  A very  high  proportion  of  all  accidents  occur  during  the  take- 
off and  landing  phase  of  flight.  The  most  recent  and  comprehensive  study  of  takeoff  and  climb  accidents 
has  been  conducted  by  Newman  for  the  Canadian  Air  Transportation  Administration  ST0L  Project  survey  [1975 
(374)].  This  report  found  that  an  aborted  takeoff  resulting  from  an  equipment  failure  occurred  in  approxi- 
mately 15  air  carrier  flights  per  million  departures,  with  some  66%  attributed  to  failure  of  a single  en- 
gine and  about  16%  to  problems  related  to  the  landing  gear.  However,  of  these,  Newman  found  that  fewer 
than  1%  of  engine  failure-caused  aborts  resulted  in  an  accident,  while  about  12%  of  the  gear-related  inci- 
dents ended  up  as  an  accident.  Overall,  about  one  incident  in  30  becomes  an  accident,  with  over  50%  of 
the  aborts  resulting  in  the  aircraft  veering  off  to  the  side  of  the  runway.  This  study  also  found  a "sur- 
prising" number  of  multiple-engine-failure  accidents  occurring  during  both  ground  roll  and  initial  climb, 
with  most  attributed  to  bird  ingestion.  There  have  been  a number  of  earlier  studies.  Among  these,  Fox- 
worth  and  Marthinsen  [1969  (375)]  in  an  Air  Line  Pilots  Association  (ALPA)  study  reviewed  IB  rejected 
takeoff  accidents  of  air  carrier  aircraft  through  1968,  an  ICAO  study  reviewed  world-wide  runway  overrun 
reports  [1967  (378)],  Kennard  [1962  (376)]  reviewed  approach  accidents,  and  an  Air  Force  study  reviewed 
military  accidents  [USAF,  1965  (379)].  The  Newman  CATA/ST0L  study  reviews  101  accidents/incidents  (for 
takeoff  and  climb  phase  only)  where  serious  injury  occurred,  the  aircraft  inadvertently  left  the  runway, 
and/or  substantial  damage  occurred  (374).  Approach  and  landing  accidents  in  air  carriers,  representing 
25%  of  all  air  carrier  accidents  during  the  period  1948  through  195B,  were  reviewed  in  a cooperative 
Flight  Safety  Foundation/Boeing  Airplane  Company/Air  Line  Pilots  Association  study  of  437  accidents  [1960 
(377)].  The  Newman  study,  or  the  NTSB  Annual  Reviews  of  Aircraft  Accident  Data,  U.S.  Carrier  Operations, 
provide  further  references  and  data. 

2.2.2  Ground  Emergency  Egress.  In  recent  years  there  has  been  more  widespread  awareness  of  air 
transport  safety  failures,  and  to  some  extent  emergency  egress  problems,  due  to  television  documentaries 
[Bergman,  1974;  1975  (381)]  and  publication  of  books  in  the  general  literature  [Halacy,  1961  (394); 
McClement,  1966  (405);  Lowell,  1967  (404);  Serling,  1969  (422);  and  Godson,  1974  (393)].  One  of  these. 
Runway:  Anatomy  of  a Major  Crash  [Godson,  1974  (393)],  examines  in  great  detail  a single  accident,  that 

of  the  crash  of  the  Capitol  International  Airways  McDonnell  Douglas  DC-8-63  at  Anchorage,  Alaska  on  27 
November,  1970.  At  present  neither  the  NTSB  nor  FAA  formally  keep  records  of  successful  evacuations  since 
there  is  no  requirement  for  this,  although  the  Emergency  Evacuation  Laboratory  at  the  FAA  Civil  Aeromedi- 
cal Institute  in  Oklahoma  City  attempts  to  keep  track  of  these  through  cooperation  of  the  air  carriers. 

This  makes  it  difficult  to  assess  the  overall  reliability  or  effectiveness  of  current  systems,  since  only 
the  failures  attract 'notice.  However,  these  occur  frequently  enough  so  that  problems  have  been  well  docu- 
mented. 

There  have  been  a large  number  of  accident  reports  (399;  410-418;  etc.)  and  some  human  factors  stud- 
ies (3B2;  385;  388;  400-402;  406-409)  which  have  recorded  current  experience  and  these  should  be  referred 
to  for  more  detailed  information.  In  addition,  several  special  reports  and  reviews  related  to  civil  air 
carrier  accidents  are  available  [Carroll,  1962  (385);  Dougherty,  1966  (3B7);  Doyle,  1967  (3BB) ; Flight 
Safety  Foundation,  1968  (389);  Haley,  1967  (395);  Hasbrook,  1958  (396);  Henneberger  et  al . , 1964  (39B); 
Hoffman  et  al . , 1976  (399);  Shuckburgh,  1975  (423);  Snow  et  al.,  1970  (424);  Snyder,  1976  (425);  and 
Tillman,  1956  (426)].  Studies  of  military  air  transport  evacuations  are  found  in  Reagin  et  al . [1969  (13)], 
Sawyer  [1957  (16)],  Snyder  and  Robbins  [1971  (21);  1972  (22)],  USAF  Industry  Life  Support  Conference  [1967 
(23)],  and  Haley  [1967  appendix  II  (395)].  Emergency  evacuation  tests  from  the  Lockheed  C-141  have  been 
conducted  by  Mclntire  [1967  (406)],  of  the  Lockheed  (Galaxy)  C-5A  by  the  USAF  [1970  (427)],  of  the  McDon- 
nell Douglas  (Nightingale) C-9A  by  Chesterfield  [1969  (384)],  of  the  Lockheed  1649  by  Garner  and  Blethrow 
[1966  (390)],  and  of  the  SST  by  Garner  and  Blethrow  [1970  (391)].  Many  other  evacuation  compliance  tests 
have  been  conducted  by  the  airfoam  manufacturers  and  the  air  carriers;  some  of  the  most  interesting  being 
tests  conducted  in  the  Concorde  supersonic  transport  certification  program  [Anstey  & Brownbill,  1975  (421)]. 
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Undoubtedly  the  model  professional  study  in  the  field  is  the  Snow,  Carroll,  and  Allgood  FAA/CAMI  re- 
port of  three  air  carrier  accidents  (United  Airlines  McDonnell  Douglas  DC-8,  Denver,  11  July,  1961;  United 
Airlines  Boeing  727,  Salt  Lake  City,  11  November,  1965;  and  Trans  World  Airlines  Boeing  707-331,  Rome, 

23  November,  1964)  in  which  a total  of  105  of  the  261  passengers  aboard  the  three  aircraft  died  in  the 
lethal  thermotoxic  environment  within  the  cabin  one  to  three  minutes  post-impact,  despite  "mild”  crash  de- 
celeration forces  and  "minimal"  cabin  destruction  [Snow  et  al . , 1970  (424)].  Other  earlier  major  studies 
have  been  conducted  by  Bruggink  [1961  (382)]  of  three  reciprocating  engine  transport  accidents.  Pioneering 
air  transport  studies  were  published  by  Cornell  University  Medical  School  of  a 1952  Northeast  Airlines 
Convair  240  crash  at  LaGuardia  (386),  and  by  Hasbrook  of  gross  pattern  of  injury  of  109  survivors  of  five 
reciprocating  engine  transport  accidents  [1958  (396)].  Typical  of  the  trend  toward  attempting  to  relate 
medical  and  human  factors  to  the  crash  environment  is  the  study  by  Joensen  and  Joensen  of  the  crash  of  a 
Scandinavian  Airlines  Fokker  F-27  into  a mountain  in  the  Faroe  Islands  (Sweden)  on  26  September,  1970 
(401).  More  recent  human  factors  studies  conducted  by  the  NTSB  Human  Factors  Branch  have  resulted  in  ex- 
cellent in-depth  reports.  A few  examples  include  the  Capitol  International  Airways  McDonnell  Douglas  DC- 
8-63F  at  Anchorage,  Alaska  which  crashed  on  27  November,  1970  [Leroy,  1971  (402,  403)],  the  Pan  American 
World  Airways  Boeing  707  crash  at  Pago  Pago,  American  Samoa  [Burgin,  1 974  (383)],  or  the  Continental  Air- 
lines Boeing  727  crash  on  takeoff  at  Denver  on  7 August,  1975,  resulting  in  injuries  to  55  occupants  [Mc- 
Cormick, 1976  (433,  final  report  not  yet  released)]. 

The  United  Airlines  McDonnell  Douglas  DC-8  accident  at  Denver  in  1961  also  resulted  in  a separate 
FAA/CAMI  analysis  of  the  evacuation  pattern  by  Hasbrook,  Garner,  and  Snow  [1963  (397)].  In  this  accident 
16  of  122  occupants  died  of  carbon  monoxide  poisoning,  even  though  the  impact  was  of  low  force  and  the  cab- 
in area  was  virtually  intact.  A post-crash  fire  outside  the  aircraft  generated  a large  volume  of  dense 
smoke  and  noxious  fumes  which  funneled  through  the  passenger  cabin  as  soon  as  the  exits  were  opened.  It 
was  found  that  the  16  fatally  overcome  passengers,  along  with  65  other  passengers,  occupied  a cabin  area 
in  which  aisle  width  was  minimal  and  only  one  door  exit  was  available  for  emergency  escape  at  the  extreme 
rear  of  the  compartment.  In  addition,  there  was  no  placard  or  other  sign  in  the  compartment  indicating 
the  existence  of  emergency  exits  in  the  forward  (first  class)  section.  It  was  also  determined  to  be  "vir- 
tually impossible"  for  cabin  attendants  in  the  tourist  section  to  go  forward  and  accelerate  the  passengers 
toward  the  rear  exit  due  to  the  narrow  aisle  width.  Ironically,  in  contrast,  the  first  class  cabin  had 
three  emergency  exits  available  for  only  41  occupants,  and  aisle  width  was  40%  greater  than  that  in  the 
tourist  section.  Prior  to  this  incident  no  emergency  evacuation  instruction  was  given  to  the  passengers. 
Available  fire-fighting  equipment  was  unable  to  contain  or  control  the  post-crash  fire  in  time  to  prevent 
smoke  from  entering  the  cabin. 

Due  to  the  increased  use  of  wide  body  air  transports  a brief  review  of  the  emergency  evacuation 
problems  encountered  in  two  accidents  involving  such  aircraft  may  provide  a typical  illustration  of  cur- 
rent problems.  In  the  first  case,  a Pan  American  Boeing  747  struck  the  Approach  Light  System  (ALS)  struc- 
ture at  the  departure  end  of  the  runway  while  taking  off  from  San  Francisco  International  Airport  on  30 
July,  1971  (191).  The  flight  had  199  passengers  and  a crew  of  19  aboard.  At  contact  with  ALS,  which  pene- 
trated the  passenqer  compartment,  two  passengers  (seats  47G  and  4BG)  were  seriously  injured.  A section  of 
angle  iron  nearly  severed  the  left  leg  below  the  knee  of  the  passenger  in  seat  47G,  and  severely  lacerated 
and  crushed  the  left  upper  arm  of  the  passenger  in  seat  48G.  A second  piece  of  angle  iron  penetrated  the 
floor  of  the  cabin  and  impaled  seats  45F,  46F,  47F,  and  4BF,  but  as  the  seats  were  unoccupied,  there  were 
no  injuries.  A third  section  of  angle  iron  passed  through  other  unoccupied  seats  and  lavatories.  At  this 
time  this  resulted  in  three  sections  of  the  ceiling  panels  falling  to  seat- top  level,  causing  no  injury 
but  effectively  blocking  access  to  and  egress  from  this  area  of  the  forward  economy  section.  In  addition, 
several  overhead  baggage  compartment  doors  came  open,  the  movie  screen  near  the  right  No.  1 exit  fell  to 
the  "down"  position,  blocking  the  view  and  movement  from  the  aisle  to  the  exit,  and  the  complete  passenger 
escape  slide  rack  fell  from  the  left  No.  4 door  (See  Fig.  13).  Passenger  shoes  were  put  in  the  lavatory. 

The  aircraft  continued  in  flight  for  1 hour  and  42  minutes  while  the  flight  crew  assessed  the  struc- 
tural damage  and  dumped  fuel  over  the  ocean.  After  returning  and  landing,  the  aircraft  veered  off  the 
right  side  of  the  runway  and  came  to  a stop  in  the  dirt  approximately  1 ,600  m (5,300  ft)  from  tiie  approach 
end  of  the  runway.  Fire  was  observed  on  and  around  the  left  wing  main  landing  gear  as  the  aircraft  was 
veering  off  the  runway,  but  extinguished  itself.  Passengers  were  briefed  concerning  the  emergency  landing 
and  impending  evacuation;  there  was  no  announcement  over  the  public  address  system  to  evacuate  the  aircraft. 
The  first  officer  inadvertently  transmitted  the  order  to  evacuate  on  the  tower  frequency  rather  than  on 
the  public  address  system.  Overhead  luggage  racks  opened  during  the  landing  and  dumped  their  contents  in- 
to the  cabin.  The  second  officer  and  second  flight  engineer  came  down  from  the  flight  deck,  shouted  to 
the  cabin  crew  to  start  the  evacuation,  and  opened  the  No.  1 right  and  left  exits  and  the  right  No.  2 exit. 
Although  they  did  not  hear  the  verbal  command  to  start  the  evacuation,  cabin  attendants  toward  the  rear  of 
the  cabin  ooened  their  assigned  exits  when  they  saw  the  evacuation  activities  in  the  front  of  the  cabin. 

The  available  self-powered  "bullhorns"  were  not  used. 

Motion  pictures  taken  of  the  landing  showed  that  right  and  left  exits  No.  1 were  opened  30  seconds 
after  the  aircraft  came  to  a stop.  The  right  No.  2 exit  was  opened  in  3B  seconds,  right  exit  No.  3 opened 
in  48  seconds,  left  and  right  exits  No.  5 opened  1 minute  10  seconds  after  the  aircraft  stopped.  The  first 
occupant  evacuated  (right  No.  1 exit  slide)  43  seconds  after  the  aircraft  stopped,  and  the  first  occupant 
to  use  the  left  No.  1 exit  slide  did  so  56  seconds  after  stopping.  The  evacuation  of  approximately  eight 
passengers  from  the  forward  section  of  the  aircraft,  in  addition  to  the  movement  of  passengers  to  the  rear 
of  the  passenger  cabin  because  of  failure  or  partial  failure  of  emergency  egress  slides  at  five  of  the  ten 
exits  (L-2,  L-3,  L-4,  R-4,  L-5)  resulted  in  a shift  of  weight  which  caused  the  aircraft  to  tilt  back  on 
the  rear  fuselages.  This  occurred  as  the  right  No.  5 door  was  opened  (Fig.  14),  and  resulted  in  slide  L-l 
slanting  aft.  this  slide  was  not  used  until  someone  on  the  ground  pulled  the  slide  to  a more  normal  posi- 
tion. Slide  L-2  was  blown  back  across  the  wing  and  parallel  to  the  fuselage,  and  was  not  usable.  Slide 
R-2  extended  in  a horizontal  position  until  a passenger  entered  the  slide,  the  left-over-the-wing  slide 
L-3  was  not  used  because  the  slide  portion  over  the  wing  flap  to  the  ground  did  not  inflate.  The  gas  gen- 
erator for  this  slide  was  in  the  left  body  gear  wheel  well  and  the  trigger  mechanism  had  sustained  impact 
damage.  The  L-4  slide  had  fallen  to  the  floor  during  the  takeoff  and  was  not  usable.  The  R-4  slide  did 
not  inflate.  The  gas  generator  bottle,  mounted  in  the  upper  portion  of  the  door  structure,  had  shifted 
toward  the  center  of  the  aircraft  and  misaligned  the  trigger  mechanism  and  the  bottle.  Slide  L-5  was 
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jammed  under  the  fuselage  as  the  aircraft  tilted  to  the  tail -down  position.  The  exit  floor  was  then  about 
1.5  m (5  ft)  above  the  ground  and  some  passengers  utilized  the  exit  by  jumping  to  the  ground.  The  forward 
exit  slides  became  almost  vertical  as  the  aircraft  settled  back  on  its  tail.  At  least  four  persons  were 
observed  using  slide  L-l  and  others  used  R-l  after  the  aircraft  tilted.  Eight  passengers  were  hospitalized 
with  serious  back  injuries  after  they  used  the  No.  1 slides.  Nineteen  other  persons  received  minor  cuts, 
abrasions,  contusions  and  sprains  during  the  evacuation.  There  was  no  record  of  the  total  elapsed  time 
required  to  complete  the  evacuation.  Fortunately  there  was  no  smoke  or  fire  to  affect  evacuation. 


FORWARD  ECONOMY  SECTION  CEILING 
FELL  TO  SEAT  HT,  BLOCKING  ACCESS 


Fig.  13.  Diagram  of  emergency  egress  hazards  contributing  to  injuries  in  this  Boeing  747  accident. 


Fig.  14.  Pan  American  Boeing  747  accident  at  San  Francisco  30  July,  1971,  resulting  in  nose- 
high  attitude.  27  injuries  were  suffered  in  the  subsequent  evacuation.  Note  wind  effect  on 
left  (L-2)  slide,  blown  aft  almost  parallel  to  the  wing,  and  right  side  (R-l)  escape  slides. 
The  vertical  deployment  of  left  L-l  escape  slide  resulted  in  an  almost  vertical  drop  of 
approximate! v 27  feet  (or  a 3-storv  drop).  (Photo  courtesy  NTSB.  See  ref.  191.) 
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Fig.  15.  Evacuation  slide  failure 
in  Pan  American  Boeing  747  accident. 


Fig.  16.  Obstacles  to  passenger  egress  in  Icelandic 
Airlines  McDonnell  Douglas  DC-8-61  "hard  landing" 
included  failure  of  hat  racks,  injuring  passengers, 
and  failure  of  overhead  compartments,  spilling  life 
rafts  and  an  emergency  escape  slide  pack  into  the 
aisle. 


Typical  obstacles  which  may  impede  passenger  evacuation  in  an  accident  are  shown  in  Fig.  16.  In 
this  case  an  Icelandic  Airlines  McDonnell  Douglas  DC-8-61  experienced  a "hard  landing"  on  23  June,  1973  at 
John  F.  Kennedy  International  Airport,  New  York.  Subsequent  to  impact  the  No.  1 engine  broke  off  and  a 
fire  erupted  in  the  engine  pylon.  Of  119  occupants,  30  received  minor  injuries  and  8,  including  two  stew- 
wardesses,  were  seriously  injured  due  to  the  "hard  landing."  However,  factors  influencing  this  night  evacu- 
ation included  failure  of  the  hatracks  in  the  cabin,  injuring  passengers  and  creating  egress  obstructions; 
the  overhead  compartments  spilled  life  rafts  into  the  cabin  aisleway;  and  the  emergency  escape  slide  pack 
on  the  right  rear  service  door  broke  loose  from  its  mounts. 

Evacuation  can  be  hampered  by  other  final  orientations  of  the  aircraft  fuselage,  which  may  render 
some  emergency  exits  hazardous  or  unusable.  For  example,  in  a Northwest  Orient  Airlines  Boeing  747  acci- 
dent at  Miami  on  15  December,  1972  (244;  411),  birds  were  ingested  on  takeoff,  the  nosegear  collapsed 
after  striking  a concrete  abutment,  and  the  aircraft  came  to  rest  in  a tail-high  attitude  (Fig.  17).  No 
one  was  injured  in  the  crash;  however,  four  occupants  received  minor  injuries  in  the  evacuation,  which  was 
accomplished  in  about  2 minutes.  In  this  case  the  2 rear  exits  were  unusable,  and  one  evacuation  slide 
failed  to  inflate,  rendering  that  exit  also  unusable. 

In  a fourth  case,  a Trans  World  Airlines  Boeing  747  was  involved  in  an  evacuation  accident  on  1 Sep- 
tember, 1972,  at  the  John  F.  Kennedy  International  Airport,  New  York,  during  which  8 passengers  were  in- 
jured seriously  and  72  received  minor  injuries  (409).  During  taxi  out  for  takeoff,  a fire  and  smoke  from 
the  left  body  landing  gear  precipitated  the  night  evacuation.  An  evacuation  alarm  was  used  to  initiate 
the  evacuation  and  all  but  about  70  of  the  335  passengers  aboard  evacuated  the  aircraft  via  emergency  evac- 
uation slides.  The  evacuation  continued  while  the  aircraft  engines  were  still  running,  and  most  of  the 
80  injuries  resulted  when  passengers  were  blown  down  by  exhaust  blast  from  the  engines.  Other  injuries 
were  attributed  by  investigators  to  passengers  deplaning  with  carry-on  baggage  and  to  passengers  piling 
up  at  the  bottom  of  the  evacuation  slides.  The  slides  were  not  illuminated  by  emergency  exterior  lighting, 
and  passengers  landed  on  a hard  surface  (taxiway).  Three  of  the  evacuation  slides  were  deployed  near  the 
fire,  and  poor  coordination  and  communication  between  crew  members  was  found  (411). 

The  Aerospatiale/British  Aircraft  Corporation  Concorde  represents  the  newest  NATO  air  carrier  air- 
craft. Due  to  its  increased  performance  over  other  types,  of  a maximum  cruising  speed  of  2,179  km/h 
(1,354  mph)  TAS  or  Mach  2.05  at  15,635  m (51,300  ft),  it  has  presented  a number  of  new  problems  related 
to  safety.  On  10-11  February,  1975  emergency  evacuation  certification  demonstrations  were  carried  out  to 
demonstrate  to  the  Franco-British  airworthiness  authorities  that  the  Concorde  met  requirements  of  TSS  Stan- 
dard 5-2  (issue  5,  paragraph  9.2)  [Anstey  & Brownbill,  1975  (421)].  In  such  certification  tests,  regula- 
tions require  that  the  manufacturer  demonstrate  that  the  maximum  number  of  passengers  which  can  be  carried 
can  be  evacuated  within  90  seconds  to  the  ground  or  ramp  steps  using  only  the  exits  on  one  side  of  the 
aircraft.  (For  U.S.  certification  this  is  specified  in  FAR  25.803[c].)  In  these  tests  134  persons  (3 
flight  deck  crew,  3 cabin  attendants,  and  128  passengers)  successfully  evacuated  in  85  seconds  average 
time,  using  three  (right  side)  of  the  six  slides  available  in  this  aircraft.  In  two  of  the  three  trials, 
each  of  the  three  slides  used  operated  normally  and  a rate  of  50  persons  a minute  was  achieved  on  the  front 
right  slide  on  one  evacuation  test. 

It  is  interesting  to  note  that  during  the  second  of  the  three  trials,  the  forward  right  slide  unit 
deployed  but  failed  to  inflate,  the  threshold  emergency  light  was  inoperative,  and  the  manual  inflation 
handle  was  not  pulled.  In  addition,  the  right  center  slide  was  punctured  on  the  underside  of  the  inflated 
walkway,  making  the  slide  portion  unstable  at  its  upper  end.  This  center  unit  continued  to  be  used  in  the 
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Fig.  17.  Tail-high  attitude  in  this  Miami  Boeing  747  accident  rendered  the  rear  emergency  evacua- 
tion slide  unusable  (Photo  courtesy  Wide  World  Photos). 


test  but  the  sliding  rate  decreased  to  35  persons  per  minute  (compared  to  40  in  the  first  trial,  and  46  in 
the  third).  The  second  trial  was  abandoned  after  90  seconds.  Analysis  of  the  second  evacuation  trial  in- 
dicated that  the  unusability  of  the  forward  exit,  uncertainty  concerning  safety  of  the  center  slide,  and 
absence  of  cabin  attendants  in  other  than  the  exit  doorways  to  redirect  evacuees,  all  contributed  to  the 
slower  (and  possibly  more  realistic)  evacuation  test.  A total  of  eight  evacuees,  all  females,  were  in- 
jured in  these  three  tests,  and  this  suggests  that  emergency  evacuation  injuries  may  also  be  of  concern 
with  this  new  aircraft.  As  with  other  current  wide  body  air  carriers,  the  height  above  the  ground  of  the 
exit  doors  when  the  gear  is  down  is  impressive,  being  4.95  m (16  ft,  3 in)  to  the  sill  of  the  forward  exit 
[Taylor,  1975  (65)].  However,  as  was  noted  in  previous  accidents,  evacuations  of  wide-bodied  air  carriers 
such  as  the  8oeing  747,  can  present  hazardous  situations  when  the  sill  height  results  in  a high  vertical 
drop  of  evacuees.  Fig.  18  illustrates  the  various  safety  features  and  emergency  exit  locations  of  the 
Concorde  aircraft,  as  positioned  on  production  aircraft  number  204,  used  in  the  certification  tests  of 
February,  1975. 
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Fig.  18.  Cabin  layout,  safety  features,  and  emergency  egress  exits  on  the  Concorde,  as  con- 
figured in  production  aircraft  number  204,  used  in  certification  tests  of  February,  1975  (421). 
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2. 2. 2.1  Review  of  1973-74  Accidents.  All  reported  air  carrier  accidents  for  NATO  countries 
during  the  period  1964-1974  have  b e e n tabu 1 ated  i n Appendices  A and  B and  should  be  referred  to  for  addi- 
tional information.  In  addition,  preliminary  accident  data  for  1975,  obtained  from  the  U.K.  Civil  Avia- 
tion Authority  [World  Airline  Accident  Summary  supplements  25  and  26  (99,  100)  to  30  September,  1975],  and 
from  Preliminary  Accident/Incident  Resume  Reports  of  the  NTSB  for  1975,  are  tabulated  in  Appen.  C,  D.  How- 
ever, to  illustrate  the  current  problems  in  crash  impact  and  emergency  evacuation,  22  accidents  occurring 
during  1973-1974,  the  most  recent  period  for  which  final  reports  are  currently  available,  have  been  sum- 
marized in  the  following. 

1974 

(1)  On  30  January,  a Pan  American  Boeing  707  collided  with  runway  lights  in  landing  at  Pago  Pago, 
American  Samoa,  with  subsequent  gear  collapse.  Of  101  occupants,  96  were  fatally  injured.  Although  the 
cabin  structure  remained  intact  and  occupant  restraint  systems  were  adequate  for  the  impact  forces,  pri- 
mary emergency  exits  were  not  opened  by  crew.  Passengers  also  crowded  to  the  front  and  rear  exits,  ig- 
noring the  window  exits.  All  survivors  were  seated  in  the  middle  of  the  cabin  and  had  observed  the  pre- 
flight briefing.  The  only  fatal  impact  injury  reported  was  to  the  copilot,  and  5 survivors  received  in- 
juries. All  other  deaths  were  attributed  to  the  post-crash  fire,  in  what  should  have  been  a survivable 
crash  (276). 

(2)  A TWA  Boeing  707  with  65  aboard  was  involved  on  16  January  in  an  excessively  hard  landing  at 
Los  Angeles,  resulting  in  collapse  of  the  nosegear.  In  the  subsequent  fire  the  aircraft  was  destroyed, 
but  injuries  to  8 passengers  were  attributed  to  the  emergency  evacuation  and  none  to  flames.  The  aircraft 
was  evacuated  in  30-45  seconds  (270). 

(3)  On  6 January  a Beechcraft  99  operated  by  Air  East  crashed  at  Johnstown,  Pennsylvania,  while 
descending  below  published  minimum  descent  altitude  (MDA).  Due  to  the  high  vertical  loads,  this  accident 
was  judged  not  survivable,  although  one  of  the  17  occupants  survived.  The  occupiable  space  was  substan- 
tially reduced  in  the  impact.  While  seat  belts  remained  buckled,  their  floor  anchorages  and  seat  tracks 
failed.  There  was  no  post-crash  fire,  and  all  injuries  and  fatalities  were  due  to  impact  (430). 

(4)  On  4 January  a United  Boeing  727  lost  an  engine  on  takeoff  at  Tampa,  Florida,  and  one  of  118 
occupants  aboard  was  injured  in  emergency  evacuation  (431). 

(5)  On  11  September  an  Eastern  McDonnell  Douglas  DC-9  crashed  during  an  instrument  approach  at 
Charlotte,  North  Carolina,  and  72  of  the  82  occupants  were  fatally  injured.  This  accident  was  judged  to 
be  partially  survivable.  The  fuselage  fractured  on  impact,  and  the  tail  section,  including  the  last  5 
rows  of  seats,  was  the  only  part  to  retain  any  structural  integrity.  Fire  erupted  in  the  cabin  during  the 
crash  sequence.  The  crash  forces  were  estimated  to  be  within  human  tolerability,  but  most  passengers  were 
found  outside  the  two  main  cabin  wreckage  areas, indicating  restraint  failures.  Restraints  in  the  last  5 
rows  remained  intact,  but  most  occupants  who  survived  the  crash  there  died  due  to  post-crash  fire.  The 
auxiliary  exit  through  the  tail  was  usable,  but  the  attendant  was  probably  unable  to  open  it  because  of  her 
injuries.  All  survivors  in  the  rear  of  the  aircraft  were  either  thrown  out  of  the  wreckage  or  crawled 
through  holes  in  the  fuselage.  Three  survivors  in  the  forward  section,  including  the  copilot  and  a stew- 
wardess,  egressed  through  the  cockpit  window.  Thirty-one  passengers  and  one  crew  member  died  from  impact. 
Twenty-five  passengers  died  from  burns  and  smoke  inhalation,  and  the  death  of  one  passenger  was  attributed 
to  smoke  inhalation  only.  Five  passengers  in  the  aft  area  of  the  cabin  died  from  a combination  of  factors. 
It  was  noted  that  survivors  wearing  double-knit  clothing  received  more  severe  burns  (432). 

(6)  On  20  November  a Lufthansa  Boeing  747  crashed  at  Nairobi  Airport  when  the  pilot  failed  to  ex- 
tend the  leading  edge  slats  on  takeoff.  In  the  subsequent  crash  which  occurred  shortly  after  the  aircraft 
became  airborne,  59  of  157  occupants  aboard  died,  and  20  were  injured.  No  information  is  available  on  the 
evacuation,  human  factors,  or  cause  of  fatalities  and  injuries  (99). 

(7)  On  29  October  a Panarctic  Oils  Lockheed  L-188  mixed  cargo  freighter  crashed  on  20  cm  (8  in) 
sea  ice  short  of  the  runway  during  an  instrument  approach  to  Rea  Point,  Northwest  Territories,  Canada. 

Of  34  aboard,  only  two  survived.  The  fuselage  separated  behind  the  cockpit,  and  all  seats  (behind  the 
cargo  section)  were  torn  out.  Fire  broke  out,  and  the  aircraft  sank  in  the  sea.  It  was  determined  by 
Canadian  authorities  that  16  of  the  32  killed  had  potentially  survivable  impact  injuries,  5 surviving  long- 
er than  15  minutes,  4 between  10  and  15  minutes,  and  7 surviving  less  than  10  minutes,  of  which  6 had 
drowned.  Some  belts  may  have  had  inadvertent  impact  release,  as  chafing  on  some  of  the  cams  on  fabric- 
type  belts  showed  that  the  passenger  had  worn  the  belt,  although  thrown  out  of  the  seat  in  the  impact. 

None  of  the  crew  wore  the  upper  torso  restraint.  Seats  failed  at  floor  tracks.  All  passengers  were 
thrown  to  the  front  of  the  aircraft  in  the  impact,  although  the  aft  door  T-handle  was  found  up  and  the 
door  opened.  Vertical  loads  of  16-20  6 were  estimated;  the  captain  (who  drowned)  and  copilot  receiving 
lumbar  vertebral  compression  fractures  (110). 

(8)  On  28  February  an  Aer  Turas  Douglas  DC-7  overran  the  runway  during  landing  at  Luton,  England. 
Injuries  to  a crew  member  and  one  passenger,  of  11  aboard,  were  attributed  to  not  having  restraints  se- 
cured (99). 

(9)  On  8 February  a Union  de  Transports  Aeriens  (UTA)  McDonnell  Douglas  DC-8  aborted  takeoff  at 
Los  Angeles  due  to  fire  in  the  landing  gear  area.  Of  162  occupants  aboard,  one  passenger  broke  an  ankle 
during  evacuation.  (See  Appendix  B.) 

(10)  On  26  January  a Turk  Hava  Yollari  (THY)  Fokker  28  crashed  on  takeoff  at  Cumaouasi,  Turkey  with 
72  aboard,  with  fatalities  to  7 and  injuries  to  65.  No  information  is  available  concerning  emergency 
egress  or  injury  causation  (99). 

(11)  On  1 January  an  Itavia  Fokker  28  crashed  during  approach  near  Turin,  Italy,  with  42  aboard.  In 
the  post-crash  fire  4 were  injured  and  38  killed.  No  information  concerning  emergency  egress  or  injury 
causation  is  available  (99). 
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1973 

(12)  On  27  November  an  Eastern  McDonnell  Douglas  DC-9  overran  the  runway  at  North  Canton,  Ohio, 
plunging  down  an  11.6  m (38  ft)  embankment.  There  was  no  post-crash  fire,  and  high  vertical  impact  forces 
accounted  for  all  injuries.  The  cabin  and  cockpit  remained  intact,  but  some  head  injuries  were  caused  by 
the  collapse  of  overhead  racks  onto  seat  backs  during  final  impact,  which  also  interfered  with  use  of  over- 
wing exits.  Evacuation  was  orderly  and  effective;  however,  all  26  occupants  were  injured  in  the  crash  im- 
pact (273). 

(13)  On  17  December  an  Iberian  McDonnell  Douglas  DC-10  struck  approach  lights  during  an  instrument 
landing  system  (ILS)  approach  into  Boston's  Logan  Airport.  Of  167  occupants,  16  received  injuries  from 
evacuation.  After  the  first  impact  the  captain's  seat  became  loose  and  slid  to  its  aft  limits  of  travel. 

The  post-crash  fire  was  extinguished  before  spreading.  Cabin  attendants  could  not  open  three  of  the  exit 
doors.  Aft  cabin  floor  buckling  caused  failures  of  some  restraint  components,  but  no  seats  became  com- 
pletely detached.  Aisle  blockage  trapped  5 persons  in  the  aft  cabin.  Four  escaped  through  a fracture  in 
the  top  of  the  fuselage,  and  three  of  these  were  hospitalized  when  they  slid  off  the  fuselage  (275). 

(14)  On  28  October  a Piedmont  Boeing  737  overran  the  runway  on  landing  at  Greensboro,  North  Carolina. 
Five  of  96  occupants  were  injured.  Cabin  evacuation  was  orderly.  Small  post-crash  fire  outside  of  the 
fuselage  caused  no  injury  (266). 

(15)  On  3 November,  after  number  three  engine  disintegrated  in  flight  near  Albuquerque,  a National 
McDonnell  Douglas  DC-10  with  128  aboard  experienced  an  explosive  decompression,  fatally  extracting  one 
passenger  out  a window.  Smoke  filled  the  aft  part  of  the  cabin  following  decompression.  The  deployment 
of  passenger  oxygen  masks  was  unsuccessful  in  some  parts  of  the  cabin,  and  took  as  long  as  three  minutes 
in  others.  Twenty-four  injuries  were  due  to  decompression  and  smoke  inhalation  (255). 

(16)  During  an  ILS  approach  to  Chattanooga,  Tennessee,  a Delta  McDonnell  Douglas  DC-9,  with  79  a- 
board,  crashed  on  27  November.  The  impact  was  survivable,  with  the  fuselage  retaining  its  structural  in- 
tegrity. Scattered  fires  occurred  around  the  fuselage,  but  died  out  or  were  extinguished.  A flash  fire 
occurred  in  the  rear  of  the  cabin  but  caused  no  serious  injuries.  Emergency  lighting  was  either  inopera- 
tive or  obscured  by  heavy  smoke  from  fire  in  the  baggage  compartment,  making  visibility  very  poor  and  ham- 
pering evacuation.  Debris  in  the  aisle  from  the  galley  also  interfered  with  movement.  The  evacuation  was 
completed  in  two  to  three  minutes.  All  42  injuries  were  reported  to  be  as  a result  of  impact  (274). 

(17)  An  Overseas  National  Airways  (ONA)  McDonnell  Douglas  DC-8  aborted  takeoff  after  tire  failure  at 
Bangor,  Maine  on  20  June.  Fire  occurred  in  the  landing  gear  area.  Evacuation  of  the  261  occupants  did 
not  begin  until  three  minutes  after  the  aircraft  came  to  a stop.  There  was  confusion  as  to  the  location 
of  the  fire.  The  left  engines  were  left  idling  for  more  than  three  minutes  after  the  aircraft  stopped  and 
for  nearly  two  minutes  after  the  door  light  came  on.  Not  all  of  the  attendants  were  at  stations,  and  they 
did  not  use  megaphones,  so  no  clear  instructions  were  given  to  the  passengers.  Three  injuries  were  sus- 
tained during  evacuation  (257). 

(18)  On  23  June  an  Icelandic  McDonnell  Douglas  DC-8  deployed  full  spoilers  inadvertently  just  before 
landing  at  New  York  with  128  aboard.  Severe  vertical  loads  on  the  subsequent  crash  landing  caused  8 im- 
pact injuries.  Post-crash  fire  was  quickly  extinguished.  Evacuation  was  orderly  (253). 

(19)  On  22  July  a Pan  American  Boeing  707  crashed  after  takeoff  at  Papeete,  Tahiti,  killing  78  of 
79  occupants.  The  investigation  was  conducted  by  the  French  government. 

(20)  An  Ozark  Fairchild  227B  with  44  occupants  crashed  at  St.  Louis  on  23  July  while  shooting  an  ILS 
during  thunderstorm  activity.  Although  this  could  be  classed  as  non-survi vable  due  to  high  impact  loads 
and  severe  damage,  the  two  pilots  were  the  only  survivors.  All  but  one  passenger  seats  were  torn  loose 
from  the  floor.  Three  seat  belts  failed.  The  cockpit  remained  relatively  intact,  but  the  pilots'  injuries 
could  have  been  greatly  reduced  had  they  been  wearing  shoulder  harnesses.  A cabin  attendant  was  killed  by 
cargo  after  the  cargo  net  failed  (263). 

(21)  On  10  April  an  International  Vanguard  Invicta  crashed  into  mountainous  terrain  while  executing 
a missed  approach  near  Basle,  Switzerland.  Of  145  occupants,  108  were  killed  and  36  received  injuries. 
However,  details  of  the  evacuation  and  crash  are  not  available  (99). 

(22)  On  11  July  a Varig  Boeing  707  with  134  occupants  aboard  had  heavy  smoke  come  into  the  cabin  from 
a lavatory  during  descent  to  Orly,  Paris.  Attempts  to  distinguish  the  source  of  the  smoke  were  unsuccess- 
ful. The  flight  crew  were  unable  to  see  their  instruments  due  to  the  smoke,  so  a forced  landing  was  made 
in  a level  area  6.4  km  (4  mi)  from  the  airport.  The  resulting  crash  landing  was  survivable.  Seven  occu- 
pants escaped  through  cockpit  windows,  two  attendants  through  the  left  forward  door,  and  one  through  the 
right  galley  forward  door.  All  116  deaths  were  due  to  CO2  or  toxic  gas  inhalation,  and  there  were  no  sur- 
vivors aft  of  the  galley.  Only  the  flight  crew  used  oxygen  masks  through  the  period.  The  aircraft  was 
destroyed  by  post-crash  fire 

2. 2. 2. 2 Summary  of  Emergency  Egress  Problems.  As  can  be  seen  from  the  summaries  of  1973- 

1974  accidents,  as  well  as  the  preceding  cases  noted,  the  cause  of  the  injuries  or  fatalities  is  not  al- 
ways clear  from  the  accident  investigations.  The  crash  impact  is  identified  as  having  resulted  in  81  in- 
juries during  this  period  and  at  least  107  deaths,  not  counting  fatalities  in  non-survi vable  accidents. 

But  since  many  of  these  fatalities  from  impact  probably  also  involved  cabin  areas  which  were  non-survi va- 
ble, injuries  from  this  cause  are  difficult  to  assess  without  more  precise  factual  reports.  In  the  Ozark 
crash  (No.  20)  (263),  note  that  the  pilots  received  injuries  due  to  not  using  their  shoulder  harnesses, 
while  in  the  McDonnell  Douglas  DC-10  explosive  decompression  (No.  15)  (255),  the  passenger  sucked  out  a 
window  was  wearing  a lap  belt  loosely.  A large  number  of  seat  track  and  restraint  failures  are  observed 
in  the  accidents  involving  higher  impact  loads. 

It  is  important  to  note  the  112  deaths  and  81  injuries  attributed  to  smoke  inhalation  and  toxic  fumes. 
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As  is  discussed  in  greater  detail  in  Section  3 (relative  to  smoke  hoods),  smoke,  fire,  and  toxic  gases 
have  been  shown  to  be  a major  cause  of  fatalities  in  survivable  accidents.  Of  particular  note  is  an  ear- 
lier accident  which  occurred  27  November,  1970.  In  this  instance,  a Capitol  International  Airways  Mili- 
tary Air  Command  (MAC)  charter  McDonnell  Douglas  DC-8-63F  aircraft  crashed  during  an  attempted  takeoff  in 
freezing  rain  at  Anchorage,  Alaska  [Leroy,  1971  (402,  403)].  Fire  occurred  before  the  aircraft  came  to 
rest,  followed  by  several  explosions.  Forty-five  passengers  and  one  cabin  attendant  did  not  survive  be- 
cause they  failed  to  evacuate  the  aircraft--a  46th  passenger  died  the  following  day.  One  hundred  seventy- 
three  passengers  and  9 crew  members  survived  this  accident. 

This  aircraft  is  normally  configured  to  carry  250  passengers  with  45  rows  of  seats  and  a 46th  row 
single  seat  on  the  right  side.  However,  when  used  for  military  charter,  the  configuration  is  changed  to 
219  passengers  to  allow  more  space  between  rows.  There  were  219  passengers  and  a crew  of  ten  aboard  for 
a total  of  229  occupants.  Passengers  included  two  women,  three  young  females,  and  a two-week-old  infant. 

The  crash  occurred  without  prior  warning.  While  the  aircraft  was  still  moving,  the  left  overwing 
exit  was  opened  and  fire  came  into  the  cabin.  Upon  a second  impact,  major  structural  damage  occurred. 

At  this  time,  with  fire  evident  on  the  right  side,  a number  of  military  passengers  unfastened  their  lap 
belts  and  reportedly  attempted  to  get  away  from  the  fire  area,  but  were  caught  by  the  third  impact,  which 
threw  them  forward  and  injured  several  of  them.  Some  seats  failed;  some  persons  found  themselves  outside 
the  aircraft  still  strapped  in  their  burning  seats. 

Five  of  the  12  cabin  exits  were  not  utilized  because  they  were  either  jammed,  blocked,  or  not  opened. 
Of  the  two  main  left  entry  doors,  one  was  jammed  and  inoperative.  There  were  two  galley  service  doors; 
one  was  blocked  and  inoperative  and  the  other  partially  blocked.  Of  the  four  jet  escape  exits,  the  two 
forward  exits  operated  effectively,  but  the  two  aft  exits  were  not  opened.  Three  of  the  4 overwing  exits 
were  opened.  The  cockpit/cabin  door  was  blocked  by  1.2  m (4  ft)  of  debris.  One  of  the  left-hand  forward 
escape  slides  ended  in  a pool  of  fire. 

There  was  a failure  of  the  emergency  exit  lights,  which  might  have  contributed  to  some  failures  to 
evacuate.  Since  survivors  had  been  seated  in  all  parts  of  the  aircraft,  it  has  been  termed  a survivable 
accident.  All  deaths  were  attributed  to  fire  and  smoke  inhalation,  although  cyanide  was  also  found  in 
the  smoke.  Eighteen  of  19  blood  samples  taken  at  random  from  survivors  exhibited  carbon  monoxide  satura- 
tions of  from  17.3%  to  68.6%.  An  interesting  finding,  similar  to  that  found  in  the  Salt  Lake  City  Boeing 
727  crash,  was  mechanical  obstruction  of  the  trachea,  bronchi,  and  bronchioles  by  a black  carbonaceous 
material  evidently  produced  in  the  cabin  fire.  Human  factors  study  of  this  crash  is  not  yet  complete; 
however,  the  pattern  of  fatalities  due  to  fire  and  smoke  inhalation  is  similar  to  that  of  previous  major 
survivable  accidents  and  emphasizes  the  need  for  an  emergency  protective  smoke  hood  and  adequate  emergency 
exit  lighting,  and  suggests  the  need  for  improved  egress  exits. 

Numerous  airline  non-crash  evacuations  have  occurred.  Further,  the  possibility  of  emergency  evacua- 
tion occurring  which  is  not  initiated  by  flight  crew,  or  one  which  progresses  without  the  flight  crew's 
awareness,  should  be  considered  on  the  basis  of  two  such  occurrences  in  1971.  In  April,  a TWA  Boeing  727 
had  landed  at  O' Hare  International  Airport,  but  because  a gate  was  not  yet  ready,  had  to  hold  on  the  ramp. 
The  flight  engineer  attempted  to  start  the  auxiliary  power  unit  (APU)  but  unbeknownst  to  the  crew,  flame 
from  the  APU  start  was  observed  on  the  right  side  of  the  aircraft  by  some  passengers  and  a TWA  supervisory 
stewardess  riding  as  a non-revenue  passenger.  As  a result,  an  emergency  evacuation  was  initiated  through 
the  two  left  window  exits  and  subsequently  through  the  rear  stairs.  The  three  scheduled  stewardesses  were 
not  aware  that  an  evacuation  was  in  progress  until  they  saw  passengers  leaving  by  these  exits.  The  flight 
deck  crew  was  completely  unaware  than  an  evacuation  was  in  progress  (opening  overwing  does  not  activate 
any  cockpit  warning  lights).  They  were  about  to  continue  taxiing  when  the  forward  stewardess  knocked  on 
the  cockpit  door,  and  concurrently  a warning  light  went  on  as  the  rear  door  was  opened.  The  flight  deck 
crew  then  shut  down  and  advised  passengers  to  exit  through  the  rear  stairs.  No  emergency  evacuation  alarm 
was  sounded.  Four  serious  and  7 minor  passenger  injuries  occurred  in  jumping  from  the  left  wing  landing 
edge  2.7  m (9  ft)  to  the  concrete  ramp  (435). 

The  second  case  occurred  on  15  May,  1971,  involving  a United  Airlines  McDonnell  Douglas  DC-8  with 
45  passengers  and  7 crew  aboard.  Prior  to  boarding  at  San  Francisco,  the  crew  had  been  alerted  to  a bomb 
threat.  As  the  first  engine  was  being  started,  a pneumatic  air  hose  broke  loose  and  began  to  flail  about, 
knocking  down  the  ramp  crewman  and  disconnecting  his  interphone.  The  explosive  noise  of  the  hose  parting 
and  subsequent  unidentified  noise  of  the  flailing  against  the  aircraft  caused  the  nervous  stewardess  to 
commence  evacuation.  Overwing  exits,  rear  exit  slide,  and  an  aft  exit  slide  were  employed,  and  the  air- 
craft was  evacuated  in  40  seconds.  Six  passengers  received  serious  injuries  when  they  jumped  to  the  ramp 
from  the  wings  (433).  The  subsequent  evacuation  of  a Pan  American  World  Airways  Boeing  747  at  San  Fran- 
cisco on  30  July,  1971,  as  noted  in  Section  2.2.2,  also  has  pointed  up  problems  with  emergency  evacuation 
equipment  and  shown  that  a new  generation  of  escape  devices  will  require  new  techniques  (434). 

During  this  1973-1974  period  29  individuals  were  reported  to  have  received  injuries  during  evacua- 
tion from  the  aircraft  post-accident.  This  would  clearly  indicate  that  attention  should  be  given  to  im- 
proving egress  techniques  to  provide  greater  safety  in  slide  and  exit  design.  Among  other  problems  noted 
in  these  cases  were  failure  of  the  emergency  lighting  system,  non-use  or  failure  of  the  emergency  public 
address  system,  and  failure  of  the  emergency  oxygen  mask  system.  Heavy  smoke  in  the  cockpit  caused  the 
emergency  crash  landing  of  the  Varig  Boeing  707  near  Paris  and  caused  the  fatal  crash  of  a Pan  American 
Boeing  707  freighter  at  Boston.  Post-crash  fire  occurred  in  most  instances,  although  was  often  extin- 
guished early. 

The  recent  special  study  by  the  National  Transportation  Safety  Board  examined  10  recent  U.S.  air 
carrier  accidents  in  which  an  emergency  evacuation  occurred  [1974  (411)],  and  should  be  referred  to  for 
further  details.  The  factors  which  most  commonly  were  identified  as  influencing  emergency  egress  were: 
weather,  terrain,  aircraft  attitude,  fire  and  smoke,  evacuation  slides,  emergency  lighting,  emergency 
communications  equipment,  obstructions  to  egress,  passenger  preparedness,  crew  member  training,  and  crew 
member  procedures.  This  resulted  in  10  safety  recommendations  concerning  needed  improvements  in  evacua- 
tion slides,  megaphones,  public  address  systems,  passenger  briefings,  emergency  lighting,  and  crew  member 
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training. 

The  full  tabulation  of  accidents  (Appendices  A-D)  also  indicates  a surprising  number  of  serious  in- 
flight injuries  occurring  as  a result  of  non-restrained  passengers  during  encounters  with  turbulence. 

While  this  discussion  of  current  accident  performance  has  been  brief,  examination  of  summary  data  shows 
that  impact,  fire,  smoke,  and  toxic  hazards,  and  emergency  egress  remain  major  problems  requiring  better 
occupant  protection  techniques. 

2.3  Military  Air  Transport  Experience 

Air  transports  designed  or  modified  for  military  operations  may  present  some  different  problems  than 
those  in  civil  use  relative  to  emergency  egress  and  occupant  protection.  Factors  may  include  alternative 
seating  configurations  for  each  model,  which  may  include  side-facing  troops  or  mixed  cargo,  different  re- 
quirements and  procedures  for  emergency  aisle  or  exit  identification  and  usage,  and  other  operational  pro- 
cedures. 

Since  aircraft  configuration  relative  to  high-  or  low-wing  may  play  a role  in  the  problem  of  occu- 
pant protection  and  egress,  a comparison  of  a typical  high-wing  transport,  the  Lockheed  C-141,  with  the 
low-wing  Boeing  C-135  was  reported  in  a 1971  University  of  Michigan  study  conducted  for  the  U.S.  Air  Force 
[Snyder  & Robbins,  1971  (22)]. 

2.3.1  USAF  Lockheed  C-141  High-Wing  Transport.  In  this  study  a total  of  14  Lockheed  C-141  accidents 
were  reported  as  of  November,  T971,  and  these  are  summarized  in  Table  VI.  Only  two  accidents  involved 
crash  environments,  and  in  both  cases  the  aircraft  were  destroyed.  Both  must  be  classed  as  non-survi vabl e 
accidents,  although  one  involved  a crash  into  the  sea  in  which  two  survivors  escaped  through  the  open  fuse- 
lage. From  a crash  protection  or  emergency  egress  viewpoint,  these  cases  provide  little  additional  acci- 
dent performance  information. 


TABLE  VI. 

SUMMARY  OF  USAF  LOCKHEED  C-141  ACCIDENTS 
Jan.  , 1966  - Nov. , 1971 


Day/Ni ght 

Total 

Occup 

Survivability 

Pilot 

Injuries 

Crew 

Passengers 

Circumstances  and 
Egress  Comments 

1 . Day 

7 

No  crash 

2 none 

5 

none 

Ldg  and  go-around 
damage. 

2.  Day 

7 

No  crash 

2 none 

5 

none 

Minor  damage. 

3.  Day 

7 

No  crash 

2 none 

5 

none 

In-fl ight  explosive 
decompression . 

4.  Day 

7 

No  crash 

2 none 

5 

none 

In-flight  hail  damage. 

5.  Day 

5 

No  crash 

2 none 

1 

2 

serious 

none 

In-fl ight  evasion  to 
avoid  mid-air  col  - 
lision  - engineer 
unrestrained. 

6.  Day 

68 

No  crash 

2 none 

11 

none 

1 major 
1 minor 
53  none 

Air  evacuation.  In- 
flight turbulence. 

2 nurses  unrestrained. 

7.  Dusk 

32 

No  crash 

2 none 

5 

none 

1 fatal 

Night  drop.  Para- 
trooper fatality. 

8.  Day 

8 

No  crash 

2 none 

6 

none 

In-flight  hail  damage. 

9.  Day 

8 

No  crash 

2 none 

6 

none 

Precautionary  ldg. 

ID.  Night 

8 

No  crash 

2 none 

1 

5 

major 

none 

In-flight  explosive 
decompression . 

11.  Day 

7 

No  crash 

3 none 

4 

none 

In-flight  explosive 
decompression . 

12.  Day 

29 

Survi vabl e 

2 none 

9 

none 

18  none 

In-flight  rapid  decom- 
pression and  hydraulic 
failure.  Loss  of  com- 
munication system,  use 
of  aft  and  crew  en- 
trance exits.  Hand 
fire  extinguisher. 
Flight  deck. 

13.  Night 

9 

Non-survivable 

* 1 fatal 

6 

fatal 

Takeoff  crash  in  sea. 
Two  survivors. 

14.  Night 

5 

Non-survivable 

2 fatal 

3 

fatal 

Aircraft  destroyed  in 
runway  collision. 

Source: 

Snyder  and 

Robbins,  1971 

(22) 

* Two  crew  survived,  but  crash  destroyed  aircraft. 


2.3.2  USAF  Boeing  C-135  Low-Wing  Transport.  A total  of  30  low-wing  Boeing  C-135  accidents  occurred 
involving  194  crew  members  and  214  passengers.  Of  these,  15  accidents  involved  no  injury  to  crew  or  pas- 
sengers, 11  accidents  were  non-survivable  and  fatal  to  all  occupants,  one  accident  could  probably  be 
classed  as  non-survivable  (fatal  to  81  of  83  occupants),  and  3 accidents  involved  minor  to  major  injuries. 
Of  the  30  Boeing  C-135  accidents  listed  in  Table  VII,  9 accidents  provide  crash  evacuation  performance 
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TABLE  VII. 

SUWARY  OF  USAF  80EING  C-135  ACCIDENTS 
Jan.,  1964  - Nov.,  ig71 


Total 

Configuration  Day/NIqht  Occup  Survivability 


Injuries  Circumstances  and 

Crew  Passengers  Egress  Comments 


1.  KC-135A 

Day 

5 

Non-survl vable 

3 fatal 

2 fatal 

2.  KC-135A 

Night 

8 

Survlvable 

3 none 

4 none 

3.  KC-135Q 

Night 

5 

Survi vable 

3 none 

2 none 

4.  RC-135S 

Night 

18 

Survlvable 

2 none 

16  none 

5.  KC-135A 

Night 

6 

Survlvable 

2 none 

4 none 

6.  KC-135A 

Day 

6 

Survlvable 

3 none 

3 none 

7.  KC-135A 

8.  WC-1358 

Day 

Day 

4 

9 

Survlvable 

Survlvable 

1 none 

2 none 

1 none 
7 none 

2 none 

9.  KC-135A 

Night 

7 

Survlvable 

2 none 

2 none 

3 none 

10.  KC-135 

Night 

6 

Non-survl vable 

2 fatal 

4 fatal 

11.  KC-135 

Day 

4 

Non-survlvable 

2 fatal 

2 fatal 

12.  KC-135A 

Day 

56 

Survlvable 

2 minor 

1 major 
1 none 

11  fatal 
6 major 
3 minor 
32  none 

13.  KC-135 

Day 

9 

Non-survi vable 

3 fatal 

6 fatal 

14.  KC-135 

Day 

4 

Survlvable 

1 none 

3 none 

15.  KC-135A 

Day 

5 

Survlvable 

3 none 

2 none 

16.  KC-135 

Day 

4 

Survlvable 

2 none 

2 none 

17.  KC-135 

Day 

6 

Survlvable 

2 none 

4 none 

18.  KC-135 

Day 

4 

Survi vable 

2 none 

2 none 

19.  KC-135 

Day 

13 

Non-survlvable 

8 fatal 

5 fatal 

20.  KC-135 

Day 

3 

Survi vable 

1 none 

2 none 

21.  KC-135A 

Dusk 

14 

Survlvable 

2 none 

5 none 

7 none 

22.  KC-135R 

Day 

5 

Survi vable 

3 major 

1 fatal 

1 major 


23.  KC-135 

Ni  ght 

9 

Non-survi vable 

4 

fatal 

5 

fatal 

24.  KC-135 

Day 

7 

Non-survi vable 

2 

fatal 

5 

fatal 

25.  KC-135 

Night 

5 

Non-survi vable 

2 

fatal 

1 

fatal 

1 fatal 

26.  KC-135 

Night 

84 

Non-survi vable 

3 

fatal 

8 

fatal 

73  fatal 

27.  KC-135 

Night 

5 

Non-survi vable 

2 

fatal 

3 

fatal 

28.  KC-135 

Day 

4 

Non-survi vable 

2 

fatal 

2 

fatal 

29.  KC-135 

Night 

8 

Survi vable 

3 

none 

4 

none 

1 none 

3D.  KC-135B 

Night 

83 

Non-survivable(?) 

3 

major 

3 

fatal 

75  fatal 

2 

major 

Source:  Snyder  and  Robbins,  1971  (22) 


Crash  Into  ground,  catastrophic 
destruction.  IFR  approach. 
Material  failure. 

Overran  F4C  on  night  T.O.  Emer- 
gency exits  used  by  crew.  Rope 
used  on  left  pilot  side  but 
unable  to  use  on  right  side. 
Alarm  bell  used. 

Normal  ldg  and  wing  damage.  No 
emergency  egress. 

Ran  off  Icy  runway  on  ldg.  Alarm 
bell  used.  Pilot  and  copilot 
windows  jaircned.  Change  pilot 
Inertial  reel  lock  to  rt.  side. 

Aborted  T.O.  ran  off  runway. 
Normal  exit.  No  crew  briefing. 
Alarm  bell  used.  Only  5 sets 
survival  gear  for  6 crew;  no 
helmets  worn. 

Minor  accident.  3 engine  ldg. 
Normal  exit. 

Ldg  go-around.  Normal  exit. 

Ldg  roll  off  runway.  Emergency 
exits  used.  Evacuation  In 
45  secs. 

Blew  tires  on  T.O.  Gear  collapse 
on  ldg.  Alarm  bell  used.  Crew 
evacuation  through  crew  entry 
chute  using  escape  rope. 

WX  approach  Into  mt.  Total 
destruction. 

Crash  on  T.O.  Total  destruction. 
None  of  crew  wearing  restraints 
nor  helmets. 

Ldg  short  of  runway.  Aircraft 
destroyed.  Emergency  evacua- 
tion In  45  secs.  All  fatalities 
due  to  smoke  Inhalation;  poor 
emergency  lighting;  5 crew  In- 
juries due  to  Improper  lock  on 
shoulder  restraint. 

In-flight  accident.  Total 
destruction. 

Air  refueling  damage  In  flight. 

T.O.  crash.  Emergency  evacua- 
tion. Rope  used  tangled. 

Hall  damage  In-flight. 

Hall  damage  In-flight. 

F4  boom  collision  In-flight. 

T.O.  crash,  total  destruction. 

Air  refuel  damage  In-flight. 

T.D.  abort.  Alarm  bell  used. 
Unable  to  use  rear  exit. 

T.O.  crash  fire.  Aircraft 
destroyed.  Fatality  due  to 
not  wearing  seat  belt  or 
helmet. 

IFR  ldg  approach.  Hit  mt. 

Aircraft  destroyed. 

T.D.  crash.  Aircraft  destroyed. 

Ldg  crash/fire.  Aircraft 
destroyed. 

IFR  T.D.  crash.  Aircraft 
destroyed. 

IFR  ldg  crash.  Aircraft 
destroyed. 

T.O.  dutch  roll.  Aircraft 
destroyed. 

Ldg  short  of  runway. 

IFR  ldg.  Crashed  short  of  run- 
way coming  to  rest  Inverted 
in  3 sections.  Destroyed  In 
fire  and  explosions.  Copilot's 
window  jammed.  Difficulty  In 
locating  crash  axe. 


information  of  particular  pertinence  to  this  study  and  are  summarized  as  follows. 

Case  No.  1 (these  numbers  do  not  correspond  with  numbers  in  table).  A Boeing  KC-135A  making  a 3- 
engine  approach  crashed  short  of  the  runway  with  56  crew  and  passengers  aboard.  The  aircraft  was  destroyed 
by  post-impact  fire.  All  11  passenger  fatalities  were  attributed  to  asphyxiation  secondary  to  hypoxia  and 
inhalation  of  smoke.  This  was  attributed  to  their  inability  to  locate  or  egress  through  emergency  escape 
exits  in  the  confusion  resulting  from  fire,  smoke,  and  inadequate  warning  of  the  emergency  landing.  Thir- 
ty-two passengers  received  no  injury,  3 minor  injury,  6 major  injury;  one  crew  member  received  major  in- 
jury, one  none,  and  the  two  pilots  minor  injuries. 
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In  this  case,  investigation  revealed  that  passengers  were  not  briefed  and  the  pilot  did  not  know 
how  many  passengers  were  aboard.  There  was  no  announcement  to  passengers  to  prepare  for  landing.  The 
crash  was  unexpected  by  the  pilots,  and  no  alarm  bell  was  used  prior  to  crash.  Life  preservers  (LPV's) 
were  not  worn  by  the  pilot  or  some  crew  members,  and  only  31  LPV's  were  worn  during  egress.  Had  this 
crash  occurred  in  the  ocean,  some  305  m (1,000  ft)  from  the  runway,  egress  from  this  aircraft  could  have 
resulted  in  more  lives  lost.  Fire  broke  out  in  the  aft  section  and  the  cargo  compartment,  and  the  flight 
deck  filled  with  black  smoke  and  apparently  ammonia  gas,  causing  panic  among  some  passengers.  Surviving 
passengers  escaped  through  the  crew  entry  door,  the  emergency  hatch  over  the  right  wing,  and  the  emergency 
hatch  over  the  left  wing. 

The  pilot,  copilot,  and  boom  operator  received  vertebral  compression  fractures  in  the  impact  due  to 
either  not  having  the  shoulder  harness  on  or  not  locking  it  prior  to  landing  impact.  The  navigator  noted 
all  the  equipment  in  the  compartment  above  his  station  came  down  on  his  head  on  impact.  Egress  problems 
were  noted  on  the  flight  deck,  with  both  the  pilot  and  copilot  getting  stuck  in  their  respective  window 
exits,  blocking  exit  for  other  crew,  and  not  having  time  to  locate  or  use  the  escape  rope.  Evacuation 
was  completed  in  45  seconds.  The  location  of  exits  and  fatalities  is  shown  in  Fig.  19.  Note  the  pile-up 
of  four  fatalities  which  occurred  aft  of  the  left  overwing  exit  due  to  aisle  blockage  from  small  cargo, 
and  the  apparent  inability  of  those  passengers  in  the  aft  compartment  to  egress  through  the  right  or  left 
aft  escape  windows,  even  though  one  individual  was  identified  as  sitting  in  the  aisle  seat  adjoining  the 
left  aft  window.  In  this  configuration,  26  individuals  used  rear-facing  seats,  but  six  passengers  sit- 
ting over  the  boom  pod  area  would  have  had  great  difficulty  in  assuming  the  recommended  ditching  and  crash 
landing  position  as  found  in  T01C-135KA-1  [pp.  3-52  (436)],  even  if  they  had  been  pre-warned  of  the  crash. 
Survivors  reported  that  they  had  a great  problem  in  attempting  to  evacuate  through  the  available  emergency 
exits  from  any  seated  position. 


^-LIFE  RAFTS  

OVERLING  ESCAPE  HATCH 


2 GREW  BUNKS 
CARGO  DOOR 


FIRE  EXTINGUISHER 


CREW  ENTRY  DOOR 


8 COLLAPSIBLE  NYLON  SIDE  FACING  SEATS 
AXE  v \ 

FIRE  EXTINGUISHERS. 

AFT  ESCAPE  HATCH.  Vf 


5 COLLAPSIBLE  NYLON 
SIDE  FACING  SEATS 


16  NYLON  SIDE  FACING  SEATS 
OVERWING  ESCAPE  HATCH 

2 CREW  BUNKS 
9 NYLON  SIDE  FACING  SEAT; 


T ENTRY  DOOR  (SOME  MODELS) 
26  REAR  FACING  SEATS 
CARGO  AREA 
17  NYLON  SIDE  FACING  SEATS 


PILOT  SLIDING  WINDOW 


Fig.  19.  Location  of  emergency  egress  exits  and  fatalities  in  Boeing  KC-135  crash  (Case  #1 ) . 


It  was  concluded  by  the  investigators  that  the  military  Boeing  KC-135  aircraft  was  not  properly  configured 
to  perform  passenger  service  with  safe  emergency  egress,  and  that  emergency  escape  was  impossible  under 
conditions  of  no  emergency  lighting,  inadequate  emergency  exits  for  the  number  of  passengers  carried,  and 
lack  of  briefing.  As  a result  it  was  recommended  that  the  number  of  passengers  on  KC-135  aircraft  be  limit- 
ed to  the  number  that  can  safely  egress  under  simulated  emergency  conditions  in  one  minute,  using  only  the 
three  escape  hatches  in  the  passenger  compartment;  that  the  loudspeaker  system  be  modified  to  ensure  posi- 
tive communication  between  crew  and  passengers;  that  additional  emergency  exits  or  enlargement  of  existing 
escape  hatches  be  considered;  and  that  installing  impact-activated  emergency  lighting  systems  for  emergency 
exits  also  be  considered. 

Case  No.  2.  This  Boeing  KC-135A  aircraft  ran  off  the  runway  during  an  aborted  takeoff.  There  was 
no  fire  or  smoke.  Impact  forces  were  low  and  all  of  the  crew  used  the  restraints  provided.  The  crew  had 
HGV-2A/P  helmets  but  none  were  worn;  there  were  only  five  sets  of  survival  gear,  including  life  jackets, 
for  six  crew  members.  There  was  no  preflight  crew  briefing  given.  The  boom  operator  was  unable  to  use 
the  rear  escape  hatch  due  to  aircraft  altitude,  and  exited  through  the  left  overwing  escape  hatch.  The 
alarm  bell  was  activated  prior  to  going  off  the  runway.  Need  of  impact-activated  lights  was  reiterated  by 
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investigators . 

Case  No.  3.  This  accident  involved  an  emergency  abort  crash  landing  of  a Boeing  KC-135A  on  the  run- 
way on  takeoff.  A fire  in  the  left  wing  area  was  extinguished  and  all  crew  evacuated  without  injury. 
However,  the  pilot  experienced  difficulty  with  the  emergency  rope  which  became  entangled  around  his  right 
foot,  and  it  was  released  by  the  I.P.  (instructor  pilot).  Difficulty  in  identifying  and  reaching  the 
pilot's  emergency  rope  storage  compartments  was  reported,  and  it  was  recommended  that  the  crew  wear  gloves 
to  prevent  rope  burns,  and  that  an  additional  emergency  escape  rope  be  installed  at  the  crew  entry  chute. 

No  alarm  bell  was  used. 

Case  No.  4.  An  emergency  abort  was  initiated  on  takeoff,  and  the  Boeing  KC-135A  aircraft  was  stopped 

off  the  runway  with  a brake  assembly  fire.  The  alarm  bell  was  used  and  the  I.P.  instructed  the  crew  on 

interphone  to  evacuate  as  soon  as  the  aircraft  stopped,  but  passengers  had  no  interphone  communication. 
Passengers  opened  the  rear  exit  hatch  but  closed  it  due  to  smoke  and  flames,  and  ran  forward  to  the  left 
winq  exit  hatch,  noting  jam-up  of  people  at  front  entrance  exit  ladder. 

Case  No.  5.  After  takeoff,  this  Boeing  KC-135A  aircraft  lost  altitude,  crashed,  burned,  and  was 

destroyed  with  major  injuries  resulting  to  four  crew  members.  A fatal  head  injury  was  received  by  a navi- 

gator, riding  in  the  boom  operator's  seat,  who  was  not  wearing  a seat  belt.  Evacuation  was  accomplished  in 
less  than  one  minute  using  left  and  right  cockpit  windows.  Distance  was  1.5-1. 8 m (5-6  ft)  above  ground 
level  and  escape  ropes  were  not  used.  The  I.P.  got  stuck  in  the  right  cockpit  window.  Although  none  of 
the  crew  were  wearing  helmets  or  parachutes,  the  flight  medical  officer  recommended  that  parachutes  not  be 
worn  on  takeoff  or  landing  because  of  interference  with  emergency  escape. 

Case  No.  6.  This  Boeing  KC-135A  aircraft  hydroplaned  on  an  icy  runway  and  went  off  the  runway  on 
landing  roll.  The  pilot  activated  the  alarm  bell  prior  to  stopping,  and  no  fire  occurred.  Both  the  pilot’s 
and  copilot's  windows  jammed  and  could  not  be  used.  The  pilot  escaped  through  the  aft  emergency  escape 
hatch,  using  the  escape  rope.  The  copilot  and  navigator  evacuated  through  the  crew  entry  door.  Eleven 
other  crew  members  were  facing  aft  and  four  were  facing  forward.  Of  these,  nine  egressed  through  the  aft 
emergency  door,  five  through  the  crew  emergency  door,  and  one  went  out  the  wing  emergency  exit.  The  pi- 
lot's shoulder  harness  inertial  reel  failed  to  lock,  and  because  his  left  hand  was  busy  with  nose  wheel 
steering  during  the  landing  roll,  it  was  recommended  that  the  pilot's  inertial  reel  lock  switch  be  changed 
from  the  left  to  right  side  so  it  can  be  more  easily  locked  in  emergency  situations. 

Case  No.  7.  On  night  formation  takeoff,  the  Boeing  KC-135A  aircraft  overran  a McDonnell  Douglas  F-4 
on  the  runway  ahead,  impacting  at  148  km/h  (92  mph),  and  swerving  to  the  right  off  the  runway,  on  fire. 

There  was  no  briefing  whatever  of  the  crew  prior  to  takeoff;  the  tower  supervisor  had  overslept  and  was 
not  on  duty.  The  alarm  system  was  activated  after  impact.  Three  crew  chiefs  and  a boom  operator  exited 
through  the  overwing  escape  hatch,  with  the  latter  receiving  knee  and  scalp  injuries  in  exiting.  The  re- 
maining four  crew  members  evacuated  through  the  cockpit  side  windows.  Although  the  escape  rope  was  used 
on  the  pilot's  side,  the  I.P.  was  unsuccessful  in  getting  it  out  the  copilot's  window. 

Case  No.  8.  During  an  IFR  (instrument  flight  rules)  approach  in  a rainstorm,  this  Boeing  KC-135B 
impacted  short  of  the  runway.  The  airframe  came  to  rest  inverted  in  three  main  sections  and  was  destroyed 
in  the  subsequent  fire  and  explosion.  There  were  78  fatalities;  the  three  pilots  and  two  of  the  three 
flight  deck  crew  receiving  major  injuries.  Heat  from  fire,  and  smoke  inhalation  resulted  in  95%  of  the 
fatalities,  and  it  was  estimated  by  the  flight  medical  officer  that  in  the  absence  of  fire,  70  of  the  78 
fatalities  would  have  survived.  All  of  the  surviving  crew  received  major  injuries  from  acute  chemical 
smoke  inhalation.  Due  to  the  inverted  position  of  the  aircraft,  the  surviving  navigator  was  unable  to  find 
an  escape  exit,  and  exited  from  an  emergency  exit  cut  aft  of  the  copilot's  seat  by  the  rescue  crew.  Three 
pilots  and  one  engineer  escaped  out  the  copilot's  side  window,  although  it  had  jammed  and  had  to  be  broken 
out  with  a crash  axe.  The  crew  experienced  considerable  difficulty  in  locating  the  flight  deck  crash  axe, 
and  it  was  recommended  that  it  be  relocated  near  windows  and  a canopy-shattering  tool  be  installed.  Except 
for  a single  tier  of  three  seats  thrown  clear  when  the  fuselage  broke  up,  all  seats  remained  intact  in  the 
impact.  No  alarm  was  given,  and  the  report  did  not  state  whether  any  briefing  was  given  to  passengers  by 
the  crew. 

Case  No.  9.  A Boeing  WC-135B  encountered  control  problems  on  takeoff  and  crashed  on  the  right  side 
of  the  runway.  The  nine  crew  members  evacuated  within  45  seconds  and  were  uninjured.  A small  nose  section 
fire  was  extinguished.  The  pilot  used  the  pilot's  escape  window  without  using  a rope  as  the  nose  was  on 
the  ground,  and  the  copilot  and  flight  engineer  went  out  the  copilot's  window.  The  navigator  exited  over 
the  left  wing  from  the  aft  compartment.  The  navigator  received  strain  due  to  the  side-facing  position  of 
his  seat.  It  was  recommended  that  T01C-135A-1  [Figs.  3-11,  pp.  3-46  (436],  be  changed  to  show  the  navi- 
gator seated  facing  aft  in  any  emergency  landing  (297). 

Details  of  the  various  Boeing  C-135  and  Lockheed  C-141  Military  Air  Transport  Operational  Configura- 
tions, emergency  escape  routes,  crew  positions,  and  emergency  equipment  storage  are  found  in  the  respective 
T.O.'s  (technical  orders)  (436,  437),  or  are  provided  in  Snyder  and  Robbins  [1971  (22)].  The  latter  ref- 
erence also  includes  detailed  crash  impact  and  egress  deficiencies  found  in  inspection  of  operational  air- 
craft, and  in  addition  to  confirming  the  observation  and  recommendation  of  the  Combat  Egress  Working  Group 
Report  [Reagin  et  al . , 1970  (13)],  points  up  other  areas  of  concern.  The  accident  experience  summarized 
in  the  foregoing  sampling  of  operational  high-  and  low-wing  military  transports  indicates  that  there  are 
a number  of  areas  in  which  occupant  crash  protection  or  emergency  egress  can  be  improved. 

2.4  Ditchings 

Since  air  carrier  aircraft  must  fly  over  large  expanses  of  water,  even  on  some  domestic  flights, 
protection  of  occupants  exposed  to  water  ditchings  must  be  considered.  An  emergency  ditching  should  not 
be  confused  with  an  uncontrolled  crash.  The  National  Transportation  Safety  Board  defines  a water  ditching 
as  "a  forced  landing  of  aircraft  in  water"  [NTSB,  1970  (473)].  Such  cases  exclude  instances  where  an  air- 
craft collided  with  land  or  water  in  uncontrolled  flight.  The  U.K.  definition  of  ditching  is  "a  premedi- 
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tated  maneuver  which,  in  the  large  majority  of  transport  aircraft,  has  been  proved  capable  of  execution 
with  reasonable  hope  of  escape  and  survival.  It  is  deliberately  executed  by  the  pilot,  under  full  control, 
with  the  specific  intention  of  abandoning  the  aircraft"  [Townshend,  ig63  (483)].  NASA  defines  ditching  as 
"to  set  an  aircraft  down  upon  water  deliberately  under  emergency  conditions,  an  act  or  instance  of  making 
a forced  landing  on  water  with  subsequent  abandonment  of  the  aircraft"  [Adams,  1959  (439)]. 

Civil  or  military  water  ditchings  of  jet  air  carrier  aircraft  have  rarely  occurred,  with  only  one 
intentional  case  involving  an  Overseas  National  Airways  McDonnell  Douglas  DC-9  turbojet  reported  to  date 
[NTSB,  1970;  1971;  1972  (10-12)].  In  this  1970  accident  40  occupants  survived  (35  passengers  and  five  crew 
members);  however,  there  were  23  occupant  fatalities  (including  a stewardess  and  two  infants).  One  unin- 
tentional ditching  of  a McDonnell  Douglas  OC-8-62  occurred  in  1968,  when  a Japan  Air  Lines  flight  "landed" 
5,791.2  m (19,000  ft)  short  of  the  runway  in  San  Francisco  Bay  [NTSB,  1969  (472);  Simpson,  1 g69  (475)]. 

In  three  other  instances  involving  a McDonnell  Oouglas  DC-8,  and  two  Boeing  707's,  water  contact  was  not 
defined  as  a ditching.  In  addition,  one  Lockheed  C-141  USAF  military  transport  has  crashed  into  the  sea 
on  takeoff,  and  one  McDonnell  Oouglas  OC-8  crash-ditched  during  an  attempted  landing;  however,  there  was 
no  attempt  to  ditch  in  either  of  these  cases. 

Air  carrier  ditchings  have  been  studied  both  experimentally  and  as  a result  of  accidents.  King  and 
Richardson  (469)  examined  18  U.S.  air  carrier  ditchings  occurring  between  1946-1956  and  conducted  Civil 
Aeronautical  Administration  (CAA)/U.S.  Navy  ditching  trials  with  a modified  Martin  404  fuselage.  Fisher 
and  Hoffman  (458)  studied  Douglas  DC-4  and  OC-6  ditching  characteristics  in  1950  by  use  of  NACA  models. 
Oitchinqs  between  1952  and  1962  were  evaluated  in  detail  by  Townshend  (483)  who  found  that  of  102  incidents, 
53  were  premeditated  ditchings,  of  which  more  than  half  were  1 00%  successful.  In  studying  11  inadvertent 
ditchings  and  22  incidents  in  which  there  were  no  survivors  ("400-500  fatalities"),  he  concluded  that  a 
substantial  number  could  have  been  saved  if  life  rafts  had  been  available.  In  a third  general  study,  22 
U.S.  air  carrier  water  ditchings  were  reported  in  detail  for  the  period  July,  1954  through  June,  1964  by 
Doyle  and  Roepe  (457),  who  found  that  647  of  720  fatalities  were  attributed  to  impact  forces,  while  only 
71  died  as  a result  of  drowning,  exposure,  or  other  causes.  Doyle  updated  this  experience  in  a 1967  paper 
(456). 


In  the  Ooyle  and  Roepe  [1965  (457)]  study,  the  air  carrier  ditchings  were  identified  by  three  groups; 
those  involving  aircraft  lost  with  no  survivors,  unintentional  ditchings  having  survivors,  and  premeditated 
ditchings  having  survivors.  Five  jet  transport  aircraft  "ditchings"  were  reported  for  this  period  as  sum- 
marized in  Tables  VIII  and  IX.  Note  that  none  of  these  involved  an  intentional  ditching  and  it  is  doubt- 
ful that  the  three  accidents  listed  in  Table  VIII  can  be  classified  as  ditchings  under  the  NTSB  classifi- 
cation. 


TABLE  VIII. 

AIRCRAFT  LOST  IN  WATER  WITH  NO  SURVIVORS 


Date 

Air  Carrier  Type 

Fatalities  Survivors 

Remarks 

1/28/61 

American  Airlines/Boeing  707 

6 

0 

"Pilot  training  flight.  Se- 
vere impact.  Possible  struc- 
tural failure  after  loss  of 
control.  Fire  and  smoke." 

1.6  km  (1  mi)  from  shore. 
(Long  Island  Sound,  N.Y.) 

3/1/62 

American  Airlines/Boeing  707 

95 

0 

"Control  failure.  Crashed 
after  takeoff.  Debris  and 
fuel  burned  at  impact."  1.6 
km  (1  mi)  from  shore. 
(Jamaica  Bay,  N.Y. ) 

2/25/64 

Eastern  Airlines/McDonnell 

Douglas  DC-8 

58 

0 

"Occupants  died  at  impact. 
Unused  flotation  gear  re- 
covered." 6.4  km  (4  mi) 
from  shore.  (Lake 
Ponchartrain , La.) 

Source 

of  Tables  VIII  and  IX:  Doyle  and  Roepe, 

1965  (457) 

TABLE  IX. 

UNINTENTIONAL 

DITCHINGS 

HAVING  SURVIVORS 

Date 

Air  Carrier  Type 

Fatalities  Survivors 

Remarks 

9/24/61 

American  Airlines/Boeing  720B 

0 

71 

"Overshot  landing.  Occupants 
picked  up  by  small  boats. 
Evacuation  completed  in  10 
min."  .16  km  (0.1  mi)  from 
shore.  (Boston  Harbor,  Mass.) 

4/7/64 

Pan  American/Boeing  707 

0 

145 

"Overshot  landing.  Occupants 
eventually  walked  to  shore; 
very  confused  evacuation." 
.16  km  (0.1  ini ) fropi  ?b.ore._ 
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Although  no  current-generation  aircraft  designs  are  involved,  Table  X shows  an  estimate  of  survivors 
in  ditchings  had  adequate  flotation  gear  been  available.  This  indicates  that  48  of  the  49  fatalities 
should  have  survived  the  ditching. 


TABLE  X. 

PROBABLE  SURVIVORS  IF  ADEQUATE  FLOTATION  EQUIPMENT 
HAD  BEEN  AVAILABLE 


Ai  r 

Date  Carrier 
12/22/54  JOHF 

9/24/55  FLTX 

4/2/56  NWA 

9/23/62  FLTX 


1/17/63  WCA 
TOTALS 


Type 

Probabl e 

Means  by  Which  Additional  Lives 

Aircraft 

Fatal ities 

Survi vors 

Could  Have  Been  Saved 

C 

P 

C 

P 

DC-3C 

1 

9 

1 

9 

Survivors  swam  22.9  m (75  ft)  to 
shore.  Ample  time  to  evacuate 
sinking  aircraft.  Life  rafts  and/ 
or  vests  would  have  saved  all  10 

fatalities. 

DC-4 

3 

0 

2 

0 

Life  raft  accessible  from  cock- 
pit would  have  saved  2 of  3 fa- 
talities. One  trapped  c/m  could 
not  be  saved.  One  c/m  killed  by 
shark  attack  and  the  other  c/m 
by  drowning/exposure. 

B- 377 

1 

4 

1 

4 

Buoyant  cushions  saved  survivors. 
Life  rafts  would  have  saved  all 

5 fatalities,  as  ample  time  was 
available  to  evacuate  and  the 

proximity  of  rescue  craft  was 
such  that  everyone  should  have 
survived . 

L-1049H 

5 

23 

5 

23 

Only  1 of  5 25-man  rafts  avail- 
able for  use.  Relocation  of  wing- 
stowed  life  rafts  to  interior  of 
aircraft  and  better  crew  and  pas- 
senger discipline  would  have  saved 
all  28  lives,  provided  all  occu- 
pants were  able  to  evacuate  the 
aircraft  successfully. 

F- 27 

3 

0 

3 

0 

Crew  died  of  exposure  and  drown- 
ing in  extremely  cold  water. 

Life  rafts  would  most  likely 
have  assured  their  survival. 

13 

36 

12 

36 

49 

48 

Source:  Doyle  and  Roepe,  1965,  Table  VIII  (457) 


Several  conclusions  resulted  from  this  study.  It  was  observed  that  "all  factors  being  equal,  pre- 
meditated ditchings  should  have  an  equal  or  qreater  number  of  survivors  than  a forced  landing  on  land,  if 
adequate  survival  and  rescue  facilities  are  provided."  It  was  also  noted  that  "most  present-day  aircraft 
are  capable  of  withstanding  ditching  impact  forces  and  remain  afloat  for  a sufficient  length  of  time  to 
complete  a successful  evacuation*  High-wing  aircraft  are  possible  exceptions  to  this  conclusion.  The 
addition  of  top  hatches  on  such  aircraft  would  provide  a means  of  egress  for  occupants  in  the  case  of  wa- 
ter landings"  [p.  657  (457)]. 

The  findings  that  647  of  720  fatalities  in  the  above  study  were  attributed  to  impact  injury  appear 
to  contrast  with  the  case  for  general  aviation  aircraft.  Snyder  [1974  (476);  1975a  (477);  1975b  (478)] 
and  Snyder  and  Gibbons  [1974  (479)]  studied  306  light  aircraft  ditchings,  involving  633  occupants,  which 
occurred  in  the  United  States  between  1964  and  1974,  finding  88.5%  survivability,  and  reporting  that  at 
least  50%  of  the  fatalities  occurred  subsequent  to  a successful  ditching,  and  were  due  to  drowning  after 
egress.  This  study  reported  finding  that  occupants  of  high-wing  multi-engine  light  aircraft  have  a signi- 
ficantly less  chance  (>0.005),  with  37.9%  occupant  fatality  rate,  of  surviving  a ditching  when  compared  to 
other  configurations  (477),  agreeing  with  conclusions  expressed  previously  by  Townsjiend  [1963  (483)],  and 
Doyle  and  Roepe  [1965  (457)].  If  these  indications  are  correct,  the  ditching  capability  of  air  carriers 
such  as  the  Airbus  Industrie  A300  series  probably  involves  some  greater  risk  than  would  be  expected  in 
low-wing  configuration  ditchings.  In  this  regard,  ditching  experience  in  military  jet  hiqh-wing  trans- 
ports (Lockheed  C-141)  has  been  evaluated  by  Mclntire  (406)  and  Snyder  and  Robbins  [1971  (21);  1972  (22)]. 
The  USAF  Lockheed  C5A  has  also  been  evaluated  for  ditching  egress  [1970  (427)].  A comprehensive  discus- 
sion of  the  factors  in  ditching  an  air  bus,  including  considerations  of  high-  vs.  low-wing  design,  has 
been  published  by  Townshend  [1968  (484)].  Air  carrier  aircraft  ditchings  have  resulted  in  a number  of 
additional  studies  through  the  years,  but  no  attempt  has  been  made  here  to  include  a comprehensive  listing 
(440-446;  449-450;  452-454;  459;  471;  481-482;  487);  it  is  suggested  that  Snyder,  1975  (477)  be  referred 
to  for  a more  complete  bibliography. 

Military  aircraft  have  been  ditched  with  overall  greater  frequency  than  civil  aircraft  [1965  (450)], 
and  there  is  an  extensive  literature.  Rotorcraft  often  ditch  [1969  (440)],  and  Bruggink  has  summarized 
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ditching  techniques  for  helicopters  [1968  (447)].  White  et  al . have  studied  ditching  egress  [1952  (486)]; 
Keating,  40  G ditching  seats  [1954  (468)];  and  Dodd,  the  rate  of  cockpit  flooding  in  a sinking  aircraft 
[1963  (455)].  Considerable  work  has  been  done,  mostly  by  the  U.S.  Navy,  relative  to  underwater  escape 
from  aircraft,  and  a comprehensive  listing  can  be  found  in  Woerden  [1961  (487)],  Snyder  et  al . [1963  (480)], 
and  Ice  et  al . [1966  (467)]. 

General  survival  principles  have  been  examined  in  other  studies.  One  of  the  most  comprehensive  dis- 
cussions of  general  ditching  procedures  was  published  by  Kysor,  a former  Eastern  Airlines  captain,  in  1961 
(470).  The  most  complete  manual  on  aircraft  ditching  is  a combined  publication  of  the  Army,  Navy,  Air 
Force,  and  Department  of  Transportation  [1968  (451)],  which  includes  detailed  instructions  on  basic  ditch- 
ing techniques  as  well  as  ditching  under  adverse  environmental  conditions.  Design  priorities  of  low-wing 
and  adequate  flotation  have  been  proposed  by  Hardingham  [1948  (465)],  who  found  that  "drowning  occurs  in 
far  too  many  ditchings"  (p.  480).  In  the  United  Kingdom,  under  project  "Walrus"  (Wrecked  Aircraft  Loca- 
tion and  Recovery  Under  the  Sea),  Hunt  has  analyzed  some  43  aircraft  which  ditched  and  sank  between  1961 
and  1970,  32  of  which  sank  in  under  182.9  m (600  ft)  of  water,  and  3 in  depths  over  1,828.8  m (6,000  ft) 
[1974  (466)].  Bruggink  [1972  (448)],  in  a special  NTSB  report,  has  outlined  emergency  ditching  techniques. 

More  recently,  several  issues  of  the  FAA  Aviation  News  [1974  (462-464)]  have  included  pointers  for  pilots 

concerning  ditching  techniques,  primarily  for  those  flying  light  aircraft.  Recent  ditchings  have  included 
a Douglas  DC-3  non-scheduled  passenger  flight  25  July,  1975  in  Lake  Mistassini,  Quebec,  Canada,  when  the 
pilot  became  lost  and  "made  a perfect  ditching  in  the  lake  approximately  20  feet  [6.1  m]  from  the  shore" 
(100).  On  14  January,  1976  an  FAA  crew,  ferrying  a North  American  Rockwell  Sabreliner  40  flight  inspec- 
tion aircraft  from  Frankfort,  Germany  to  Oklahoma  City,  ditched  in  the  Atlantic  106  km  (66  mi)  off  Recife, 

Brazil.  Two  of  the  crew  were  injured  and  an  electronics  technician  killed;  however,  at  this  time  it  is 
not  known  whether  the  injuries  were  due  to  drowning,  impact,  or  other  causes  [1976  (441)].  In  December, 

1975  a Britten  Norman  BN2-8  ditched  near  St.  Thomas,  Virgin  Islands  [NTSB,  1975  (474)].  Meanwhile,  light 
aircraft  continue  to  ditch  in  the  United  States  at  an  average  rate  of  about  29  per  year  [Snyder,  1975 
(477)],  and  ditchings  are  reported  for  other  NATO  countries  as  well  [Dept,  of  Trade,  1974  (452-454)]. 

Due  to  the  rarity  of  intentional  ditchings  by  jet  air  carrier  aircraft,  one  intentional  and  three 
unintentional  recent  ditchings  are  summarized  in  the  following  relative  to  environmental  conditions  and 
human  factors  aspects. 

2.4.1  Unintentional  Ditchings  of  a Lockheed  C-141A  and  Two  McDonnell  Douglas  DC-8  Aircraft. 

2. 4. 1.1  Military  C-141A  Ditching  Experience.  A crash  occurred  13  April,  1967  in  Cam  Ran 

Bay  during  takeoff  of  a C-141 A aircraft.  After  the  pilot  noted  the  controls  felt  "mushy"  on  takeoff,  the 

aircraft  struck  the  water  at  about  259  km/h  (161  mph),  and  was  destroyed.  Water  contact  was  in  a flat 
left -wing-low  attitude,  with  wing  flaps  extended  to  75%,  landing  gear  full  down,  and  the  spoilers  in  the 
ground  position.  Seven  crew  members  were  fatally  injured  or  drowned,  one  (the  loadmaster)  received  major 
injuries,  and  one  (the  pilot,  seated  in  the  left  seat)  received  minor  injuries  of  the  face  and  limbs.  The 
two  survivors  were  transferred  to  the  hospital  1 hour  9 minutes  post-impact. 

Insufficient  information  is  available  to  evaluate  the  C-141  ditching  characteristics  from  this  crash, 

since  the  aircraft  was  not  in  recommended  ditching  configuration--the  gear  was  down,  flaps  in  approach 
position,  spoilers  deployed,  and  air  speed  excessive.  All  cockpit  seats  were  found  with  the  seat  belts 
unfastened  and  inertial  reels  automatically  locked  (except  for  the  copilot’s  seat).  Both  seat  belt  assem- 
blies (side-facing)  that  the  loadmasters  were  using  in  the  aft  compartment  failed,  coming  loose  from  the 
rings . 


Although  the  probable  cause  of  fatalities  was  drowning,  the  investigation  noted  that  the  aircraft 
commander  and  one  flight  engineer  had  head  injuries  which  might  have  rendered  them  unconscious  post-impact. 
Similarly,  another  engineer  reportedly  had  a crushed  left  chest  which  could  be  attributed  to  impact.  Al- 
though the  surviving  pilot  was  wearing  an  upper  torso  restraint,  the  accident  report  does  not  indicate 
whether  the  fatally  injured  crew  members  were  wearing  upper  torso  restraints. 

The  flight  deck  interior  was  submerged  within  seconds  after  water  impact.  The  pilot  (I.P.  was  in 
the  right  seat)  attempted  to  stand  up  but  found  his  seat  belt  was  still  on.  After  releasing  it  he  started 
swimming  up,  was  pounded  back  by  a wing  section,  and  finally  climbed  on  a wooden  pallet.  The  surviving 
loadmaster  was  slammed  into  the  bulkhead  between  the  galley  and  flight  deck  entrance  when  his  seat  belt 
failed.  As  the  aircraft  was  immediately  filled  with  water,  he  got  tangled  up  trying  to  swim  out,  and  fi- 
nally found  a hole,  either  the  open  troop  door  or  a gaping  hole  inside.  He  did  not  open  any  escape  hatch. 

He  did  not  think  anyone  was  killed  by  impact  but  rather  trapped  and  drowned. 

The  crew  had  no  warning  prior  to  the  ditching,  although  the  surviving  loadmaster,  who  was  on  inter- 
phone, could  tell  there  was  some  sort  of  emergency  from  the  cockpit  conversation.  The  crash  circumstances 
of  this  accident  preclude  any  conclusions  concerning  evacuation  under  normal  ditching,  except  to  indicate 
that  there  may  be  little  egress  time  post-impact.  However,  failure  of  the  side-facing  seat  belt  assemblies, 
and  the  possibility  that  two  of  the  fliqht  deck  crew  were  not  wearing  upper  torso  restraint  could  have 
contributed  to  the  fatalities. 

The  experience  represented  by  this  single  C-141A  crash/ditching  to  date  had  been  previously  predicted 
in  a study  by  Mclntire  [1967  (406)].  Using  Army  paratrooper  subjects,  emergency  evacuation  time  in  the 
C-141A  was  investigated  under  simulated  ditching  conditions.  Mclntire's  review  of  prior  ditching  and  wa- 
ter-crash cargo/transport  accidents  showed  that  high-wing  aircraft  either  head  up  and  sink  immediately,  or 
they  are  heavily  damaged  and  quickly  sink  to  the  wing  level;  in  both  cases  flooding  the  passenger  compart- 
ment within  5 to  30  seconds.  The  most  rapid  ditching  evacuation  time  reported  in  the  C-141  tests  was  230 
seconds  when  life  rafts  were  not  deployed,  and  337  seconds  (5.6  min)  when  the  life  rafts  were  deployed. 

The  average  time  found  required  to  evacuate  114  passengers  and  6 crew  members  and  to  deploy  life  rafts  and 
survival  equipment  was  480  seconds.  Mclntire  concluded  that  "if  a high-wing  transport  like  the  C-141  goes 
into  the  water,  and  if  the  cabin  remains  level  and  does  not  fill  with  water,  and  if  there  are  no  injuries, 
114  passengers  and  6 crew  members  will  require  approximately  450  seconds  to  escape  the  aircraft  and  deploy 
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their  survival  equipment.  In  an  actual  emergency,  it  is  reasonable  to  expect  that  the  escape  time  will 
be  longer"  [1967  (406)].  Since  a maximum  time  of  30  seconds  is  available  prior  to  the  aircraft  sinking, 
the  probability  of  passenger  escape  in  this  situation  is  poor.  Note  that  these  simulated  tests  did  not 
involve  fire  or  smoke  hazards,  which  could  considerably  increase  these  evacuation  times.  The  USAF  Industry 
Life  Support  Conference  of  1967  found  the  following  "inadequate  ditching  provision  deficiencies. .. hatch 
opening  deficiencies,  poor  escape  ladder  placement  and  deployment  methods,  and  poor  location  of  internal 
survival  equipment"  [1967,  p.  17  (23)]. 

2. 4. 1.2  1968  Japan  Air  Lines  McDonnell  Douglas  DC-8  Ditching,  San  Francisco.  On  22  Novem- 

ber, 1968,  at  about  0920  PST,  a Japan  Air  Lines  McDonnell  Douglas  DC-8-62  aircraft  bound  from  Tokyo,  Japan 
to  San  Francisco  landed  (in  the  ocean)  5,791.2  m (19,000  ft)  short  of  Runway  28L.  Aboard  were  11  crew 
members  and  96  passengers  for  a total  of  107  occupants  [NTSB,  1969  (472)].  A human  factors  study  was  re- 
ported by  Simpson  [1969  (475)]  as  abridged: 

On  final  approach  the  aircraft  struck  the  water  with  the  right  main  landing  gear.  The  left  main 
landing  gear  subsequently  contacted  the  water,  and  the  aircraft  made  a slow  turn  to  the  left.  Upon  ini- 
tial contact  with  the  water,  the  captain  stated  that  his  indicated  airspeed  was  approximately  254  km/h 
(158  mph).  Some  of  the  experienced  travelers  aboard  described  the  aircraft  deceleration  as  merely  a hard 
landinq,  and  many  of  the  passengers  thought  they  were  on  the  runway  until  they  looked  out  and  saw  the  wa- 
ter. During  the  deceleration  some  of  the  carry-on  baggage  slid  forward  one  to  two  rows;  however,  it  was 
reported  in  other  instances  that  carry-on  baggage  remained  in  place. 

Many  of  the  translucent  plastic  covers  over  the  so-called  "cove"  lights  under  the  overhead  rack  came 

off  at  impact  and  were  propelled  at  a high  velocity  through  the  passenger  cabin.  Apparently,  no  one  was 

injured  by  these  missiles.  Blankets  and  pillows  thrown  from  their  stowage  in  the  overhead  racks  cluttered 
the  aisleways.  The  heavy  metal  rod  across  the  fuselage  to  which  the  class  divider  curtain  in  front  of  the 
aft  cabin  Is  attached  came  loose  on  deceleration  and  was  propelled  into  the  forward  cabin.  No  one  was 
struck  by  this  object.  With  the  exception  of  one  steward  in  the  aft  cabin  jump  seat,  all  occupants  were 
positioned  in  their  seats  with  seat  belts  fastened.  This  steward  was  seated  and  in  the  process  of  fasten- 
ing his  seat  belt  when  the  first  impact  occurred.  He  stated  that  he  was  able  to  hold  onto  his  seat  belt 

and  remain  in  his  seat  during  the  first  impact;  however,  on  the  second  impact  he  was  thrown  forward  approxi 

mately  2.4  m (8  ft),  but  was  not  injured. 

The  aircraft  came  to  rest  on  the  bottom  of  the  bay  in  an  approximate  four-degree,  nose-up  attitude, 
supported  by  its  intact  landing  gear.  The  water  level  was  reported  to  have  been  about  1.8  m (6  ft)  below 
the  door  sills  of  the  forward  Type  I exits,  .6  m (2  ft)  below  the  leading  edge  of  the  wing,  and  .9m  (3  ft) 
above  the  door  sills  of  the  aft  Type  I exits.  Two  Type  I exits  were  located  in  the  forward  compartment, 
one  on  each  side  of  the  fuselage.  Two  Type  I exits  were  located  in  the  aft  cabin  section.  Also  located 
in  the  aft  passenger  cabin  were  four  Type  III  exits,  each  measuring  50.8  cm  x 121.9  cm  (20  x 48  in),  situ- 
ated over  the  wings,  two  on  each  side  of  the  aircraft  fuselage.  Two  25-man  life  rafts  were  stored  over- 
head in  the  center  of  the  aisleway  of  the  forward  cabin  immediately  behind  the  cockpit  entry  door.  Four 
25-man  life  rafts  were  stored  overhead  in  the  center  of  the  aisleway  across  from  the  overwing  exits  at 
seat  rows  12  and  15  (no  seat  row  13).  In  addition,  two  25-man  life  rafts  were  stowed  overhead  in  tandem 
at  seat  row  31  (last  passenger  seat  row),  making  a total  of  6 life  rafts  in  the  aft  cabin  section  and  two 
rafts  in  the  forward  cabin  section.  An  adult  life  jacket,  stored  in  a yellow  container  under  each  seat, 
was  available  for  each  passenger.  On  the  back  of  each  passenger  seat  were  printed  the  words:  "Life  vest 

under  front  of  your  seat." 

Immediately  after  the  aircraft  came  to  rest  the  purser  reassured  the  passengers  that  the  aircraft 
was  resting  on  the  bottom  of  the  bay  and  would  not  sink.  The  passengers  were  advised  to  remain  calm  and 
to  don  their  life  jackets.  There  was  some  difficulty  in  obtaining  life  jackets  because  of  displacement 
of  carry-on  baggaqe  which  became  forcibly  jammed  under  the  seats  at  impact.  All  passengers  were  briefed 
as  to  procedures  for  donning  life  jackets;  however,  some  passengers  nevertheless  experienced  considerable 
difficulty.  Child  life  jackets  were  not  immediately  available  for  each  of  the  six  infants  aboard  as  the 
child  vests  were  stored  in  the  aft  galley  area,  inaccessible  to  the  cabin  attendants  due  to  heavy  conges- 
tion in  the  aisleways  which  included  both  occupants  and  miscellaneous  litter. 

One  of  the  stewards  was  reported  to  have  had  difficulty  opening  the  main  cabin  entry  door.  Upon 
discovery  that  the  cabin  pressurization  system  was  maintaining  a slight  positive  pressure  and  correction 
of  this  condition,  no  further  difficulty  was  experienced  in  opening  the  door.  The  pressurization  system 
was  bled  and  the  electric  power  system  to  the  aircraft  turned  off  simultaneously.  Discontinuation  of  elec- 
tric power  resulted  in  failure  of  the  aircraft  public  address  system.  Since  no  portable  systems,  i.e., 
bullhorns,  were  present  on  this  aircraft,  the  crew  was  forced  to  conduct  the  evacuation  by  shouting  the 
necessary  commands. 

Two  life  rafts  were  removed  from  their  stowage  in  the  forward  cabin  section  and  launched,  one  from 
the  main  cabin  entry  door  on  the  left  side  of  the  fuselage,  and  the  other  from  the  forward  galley  service 
door.  Only  two  of  the  four  life  rafts  stored  in  the  aft  cabin  section  across  from  the  overwing  exits  were 
utilized.  These  two  life  rafts  were  launched  from  the  leading  edges  of  the  wings,  one  from  the  left  and 
the  other  from  the  right  wing.  One  of  the  two  life  rafts  stowed  in  the  extreme  rear  of  the  aft  cabin  sec- 
tion was  launched  from  the  forward  galley  service  door.  The  stewardesses  reported  that  it  was  almost  im- 
possible for  them  to  remove  any  of  the  life  rafts  from  their  overhead  stowage  areas  without  the  rafts, 

each  weighing  approximately  65  kg  (143  lb),  falling  to  the  floor  and  perhaps  being  damaged.  Therefore, 
male  crew  members  had  to  perform  all  handling  of  the  life  rafts,  from  removal  at  stowage  areas  to  launching 

The  actual  evacuation  of  the  aircraft  was  not  initiated  until  the  aircraft  had  been  on  the  water 
approximately  5 minutes.  Since  there  appeared  to  be  no  imminent  danger  of  the  aircraft  sinking,  evacua- 
tion was  not  completed  until  about  12  minutes  later.  It  was  extremely  difficult  to  determine  the  passen- 
ger flow  and  exits  used  during  the  evacuation  due  to  the  language  barrier  and  the  unavailability  of  pas- 

sengers following  their  rescue  and  release  by  U.S.  Customs  and  Japan  Air  Lines.  Although  no  one  was  in- 
jured in  this  accident,  Simpson  noted  a number  of  hazards  which  could  have  been  more  serious  problems  had 
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rapid  emergency  evacuation  been  required.  These  included: 

(a)  A serious  injury  potential  was  created  when  the  cove  light  covers  were  detached  at  impact  and 
became  flying  missiles  throughout  the  cabin. 

(b)  Failure  of  the  public  address  system  at  a critical  moment  in  the  evacuation  resulted  in  diffi- 
culties experienced  by  crew  members  in  communicating  with  passengers. 

(c)  Children's  life  vests  were  not  imnediately  available  to  every  child  and,  therefore,  some  small 
children  were  without  a personal  flotation  device  of  any  kind. 

(d)  Difficulties  and  delays  were  imposed  by  small  female  crew  members  attempting  to  remove  the 
heavy  life  rafts  from  their  overhead  stowage  areas,  and  by  inexperienced  persons,  with  a variety  of  lan- 
guage backgrounds,  attempting  to  don  life  vests. 

(e)  The  placard  "Life  vest  under  front  of  your  seat"  tended  to  confuse  a number  of  passengers,  many 
of  whom  interpreted  this  as  an  indication  that  their  life  vests  were  located  under  the  backs  of  the  seats 
directly  in  front  of  them.  In  addition,  carry-on  baggage  served  as  an  impediment  to  removal  of  life  vests 
from  their  under-seat  stowage  locations. 


Fig.  20.  Crew  leaving  the  aircraft  after  inad- 
vertent water  landing  of  Japan  Air  Lines  McDon- 
nell Douglas  DC-8  in  San  Francisco  Bay,  Califor- 
nia (Photo  courtesy  J.  Simpson,  FAA,  CAMI). 


Fig.  21.  Passengers  evacuated  in  life  rafts 
(Photo  courtesy  J.  Simpson,  FAA,  CAMI). 


2 . 4 . 1 . 3 1969  Scandinavian  Air! ines  McDonnell  Douglas  DC-8  Ditching,  Santa  Monica  Bay,  Calif. 

A Scandinavian  Ai  rl  i nes^Sys terns  McDonnel  l Douglas  DC-~R-62  crashed  on”  T 3 January,^  1969  in  Santa  Monica  Bay 
approximately  9.7  km  (6  mi)  off  Los  Angeles  International  Airport  [NTSB,  1970  (161)].  This  aircraft  was 
attempting  an  instrument  approach  to  Runway  07R  which  resulted  in  "an  unplanned  descent  into  the  water." 

The  aircraft  was  destroyed  by  impact,  with  the  fuselage  breaking  into  three  pieces,  two  of  which  sank  in 
107  m (350  ft)  of  water.  The  third  section,  including  the  wings,  the  forward  cabin,  and  the  cockpit, 
floated  for  about  20  hours  before  being  towed  into  shallow  water  where  it  sank  (and  was  later  recovered). 

Of  the  45  persons  aboard  the  aircraft,  three  passengers  and  one  cabin  attendant  drowned;  9 passengers  and 
two  cabin  attendants  are  missing  and  presumed  dead;  11  passengers  and  6 crew  members  (including  the  cap- 
tain, the  second  pilot,  and  the  systems  operator)  were  injured  in  varying  degrees;  and  13  passengers  es- 
caped without  reported  injury.  There  was  no  fire.  The  flight  recorder  was  recovered  and  indicated  water 
impact  had  occurred  at  287  km/h  (178  mph)  airspeed  and  1.5  +G  vertical  acceleration  at  the  C.G.,  taildown. 

The  six  crew  member  survivors  were  located  in  the  forward  portion  of  the  aircraft,  with  18  passenger 
survivors  from  the  forward  tourist  cabin  that  remained  afloat,  and  6 passenger  survivors  from  the  aft  ca- 
bin section.  The  cockpit  filled  with  water  to  one-third  depth.  Passenger  survivors  reported  only  one  im- 
pact which  they  described  as  a very  hard  landing.  The  impact  was  followed  by  rapid  deceleration.  Quan- 
tities of  water  were  forced  up  through  the  cabin  floor,  and  the  center  aisle  between  seat  rows  2-11  was 
disrupted,  with  portions  missing  entirely  and  leaving  openings  down  to  the  baggage  compartment.  This  con- 
dition made  evacuation  difficult.  The  surviving  crew  members,  assisted  by  a non-revenue  captain  and  stew- 
ardess, evacuated  passengers  from  the  cabin  onto  the  wings  through  the  overwinq  exits,  and  into  life  rafts. 
From  impact  to  rescue  was  estimated  as  from  45  minutes  to  1 hour. 

The  survivors  reported  several  egress  problems,  mainly  associated  with  the  panic  conditions  following 
the  impact.  A major  problem  that  could  have  affected  survivability  following  this  accident  was  the  re- 
ported rapid  collapse  of  two  life  rafts  when  they  were  punctured  by  the  jagged  wreckage  (despite  double 
tube  construction).  It  was  suggested  that  an  improvement  would  be  to  compartmentalize  the  tubes  and  con- 
nect them  with  one-way  flow  valves  to  increase  life  raft  reliability.  The  "Fasten  Seat  Belt"  sign  was  on 
but  the  "No  Smoking"  sign  had  not  yet  been  turned  on.  All  occupants  apparently  had  seat  belts  on,  but  the 
nature  and  cause  of  occupant  injuries,  as  to  whether  received  at  impact  or  during  evaucation,  was  not  re- 
ported. Failure  of  life  jacket  lights  was  reported.  Difficulty  was  noted  in  finding  the  life  raft  cover 
release  pull  string.  In  the  darkness  on  the  wing  life  rafts  had  to  be  turned  over  several  times  to  locate 
the  string,  and  it  was  suggested  that  life  raft  covers  should  have  a ball  handle  and/or  luminous  paint  to 
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facilitate  finding  the  lanyard  for  the  life  raft  inflation.  The  emergency  cabin  lights  operated,  although 
it  was  reported  they  did  not  remain  lighted  long.  Some  of  the  survivors  reported  that  the  standard  seat 
belts  had  extra  long  free  ends  which  delayed  their  release,  since  they  had  to  interpret  what  the  problem 
was  during  a time  of  panic,  as  well  as  having  to  use  both  hands  to  release  the  belt. 

2. 4. 1.4  Intentional  Ditching  of  McDonnell  Douglas  DC-9.  On  2 May,  1970  an  Overseas  National 
Airways  DC-9-33F  operating  as  ALM  ( Anti 1 I i annse  Luchtvaart  Maatschappi j ) Dutch  Antillian  Airlines,  ran  out 
of  fuel  and  was  ditched  46.6  km  (29  mi)  E.N.E.  of  St.  Croix,  Virgin  Islands  VOR  (very  high  frequency  omni- 
range station)  in  the  Carribean  Sea.  This  is  the  only  known  intentional  ditching  of  a scheduled  jet  air 
transport  aircraft  to  date.  Detailed  information  can  be  found  in  NTSB  accident  reports  [1970  (10);  1971 
(11)],  NTSB  special  study  [1972  (12)],  and  in  Walhout  (Human  Factors  Group  Chairman's  Factual  Report  [1970 
(485)].  Of  63  aboard,  there  were  fatalities  to  23,  including  a stewardess  and  two  infants. 

This  flight  departed  J.F.  Kennedy  International  Airport,  New  York,  for  St.  Maartens,  Netherland  An- 
tilles, with  55  adult  passengers,  two  infants,  and  a crew  of  6 aboard.  At  St.  Maartens,  after  aborting 
one  ADF  approach  and  three  circling  approaches,  they  diverted  to  St.  Thomas.  They  then  changed  course  to 
St.  Croix  due  to  fuel  shortage.  The  captain  instructed  the  purser  to  brief  the  passengers  for  a possible 
ditching,  and  to  have  the  passengers  don  life  jackets  as  a precautionary  measure.  No  further  instructions 
were  qiven.  The  navigator,  with  the  help  of  the  purser  and  a male  passenger,  repositioned  the  life  raft 
from  the  coat  closet  into  the  galley  area,  with  some  difficulty.  Passengers  reported  difficulty  in  re- 
moving life  vests  from  the  storage  pockets  under  the  seats.  The  steward  put  life  vests  on  the  two  infants 
aboard. 

There  was  no  “prepare  to  ditch”  warning  given  by  the  crew  prior  to  water  impact,  nor  was  a "brace 
for  impact"  warning  given.  Neither  the  navigator  nor  the  purser  had  time  to  fasten  his  seat  belt  before 
impact.  The  steward  was  seated  on  the  life  raft  package,  facing  aft.  The  stewardess's  position  at  im- 
pact is  uncertain.  Some  passengers  were  seated  upright;  some  had  assumed  a brace  position;  others  were 
standing,  donning  their  life  vests,  when  impact  occurred.  There  were  reports  of  seat  failures.  Some 
passengers  did  not  have  their  seat  belts  fastened  at  impact.  Other  passengers  reported  being  thrown  from 
their  seats  despite  having  fastened  seat  belts  (although  the  report  does  not  provide  this  information, 
similar  instances  have  previously  occurred  when  long  belt  ends  whipped  and  released  buckles  in  the  metal- 
to-webbing  type  seat  belts).  One  couple  reported  that  they  had  unfastened  their  belts  prior  to  impact  in 
order  to  be  able  to  evacuate  faster.  Evacuating  passengers  observed  unconscious  or  apparently  lifeless 
passengers  subseguent  to  impact.  The  pilot  had  a life  vest  on  as  well  as  shoulder  harness  and  seat  belt. 
The  copilot  wore  his  shoulder  harness  but  no  life  vest.  The  impact  deceleration  was  reported  to  be  severe, 
longitudinal,  with  a minor  left  lateral  component. 

Post-impact,  the  copilot,  navigator,  purser,  and  steward  evacuated  through  the  galley  door  after 
having  difficulty  with  the  life  raft,  which  inflated  in  the  galley  area.  The  captain  exited  through  the 
left  sliding  cockpit  window  and  opened  the  left  overwing  exits  from  the  outside.  A passenger  seated  next 
to  the  right  aft  overwing  exit  opened  this  exit  as  soon  as  the  aircraft  came  to  rest  and  exited,  followed 
by  at  least  22  other  passengers.  Two  passengers  from  the  first  row  exited  through  the  cockpit  window, 
swam  to  the  left  side  of  the  fuselage  and  opened  the  left  overwing  exits  from  the  outside,  and  helped  a 
man  and  woman  passenger  egress.  None  of  5 life  rafts  aboard  was  deployed.  The  navigator  found  the  emer- 
gency escape  slide  from  the  galley  service  area  floating  in  the  water  and  inflated  it.  Many  passengers 
and  the  copilot  congregated  around  this  flotation  device.  Life  rafts  subsequently  dropped  were  not  located 
or  could  not  be  returned  to  the  passenger  area  due  to  rough  seas  with  1.8-2. 4 m (6-8  ft)  swells.  Survi- 
vors were  rescued  by  helicopters.  The  aircraft  sank  in  over  1 ,524  m (5,000  ft)  of  water. 

This  ditching  resulted  in  a NTSB  special  study  (12)  which  included  in  the  detailed  analysis  the  air- 
craft and  occupant  impact  dynamics,  eguipment  failure,  and  post-ditching  emergency  egress  problems.  The 
magnitude  of  the  deceleration  was  estimated  to  be  8-12  G's  applied  over  0. 5-1.0  seconds,  with  the  aircraft 
stopping  in  15.2-24.4  m (50-80  ft).  In  this  instance  the  pre-ditching  briefing  was  incomplete  and  the 
stewardess  and  at  least  five  passengers  were  unrestrained  at  impact,  at  least  seven  restrained  passengers 
were  thrown  from  their  seats,  and  three  double-seats  failed,  which  contributed  to  the  fatalities.  It  was 
estimated  that  this  aircraft  floated  for  five  to  six  minutes  and  most  survivors  were  evacuated  within  two 
to  three  minutes.  Since  this  ditching  experience  is  unique  the  conclusions  and  recommendations  of  the 
NTSB  are  important  in  considering  technology  which  might  provide  additional  protection  in  future  air  car- 
rier ditchings,  and  are  as  follows  [NTSB,  1972,  pp.  13-14  (12)]: 

CONCLUSIONS:  1.  The  pre-takeoff  briefing,  which  is  required  to  acquaint  passengers  with  the  emer- 
gency provisions  of  the  aircraft,  was  inordinately  short,  a statement  of  facts  rather  than  a briefing,  and 

it  left  the  initiation  of  action  to  the  passengers. 

2.  The  pre-ditching  briefing  was  incomplete  in  that  the  passengers  were  not  informed  about  the  vari- 
ous emergency  provisions  on  the  aircraft.  This  was  as  a direct  result  of  the  failure  of  the  cockpit  crew 
to  inform  the  cabin  crew  adequately  about  the  urgency  of  the  situation. 

3.  The  briefing  outline  regarding  the  life  vests  was  inadequate;  despite  two  recent  demonstrations, 

the  passengers  were  unfamiliar  with  the  location,  the  storage  method,  and  the  packaging  of  the  life  vests, 

and  considerable  difficulty  was  experienced  in  donning  the  life  vests.  This  reduced  the  effective  use  of 
the  available  time  for  passenger  preparation. 

4.  The  entire  crew  had  received  standard  training;  despite  this  fact,  the  cockpit  crew  exhibited  in- 
adeguate  knowledge  of  the  critical  actions  necessary  in  the  preparation  for  a water  landing,  and  did  not 
exert  its  command  responsibility.  The  cabin  crew  exhibited  less  than  efficient  management  in  the  cabin 
preparation  as  a result  of  dissimilar  training  and  experience. 

5.  Unfamiliarity  of  the  entire  crew  with  each  other  and  the  use  of  dissimilar  safety  procedures  and 
methods  resulted  in  conflicting  actions. 

6.  The  aircraft  went  through  the  ditching  seguence  without  significant  structural  compromise  to  the 
occupiable  areas.  The  forces  generated  were  estimated  to  have  been  on  the  order  of  8 to  12  G's  applied 
over  a time  period  of  0.5  to  1.0  seconds. 

7.  Analysis  of  the  dynamics  of  occupants  indicates  that  the  high  proportion  of  fatalities  in  this 
accident  was  due  to  disabling  injuries  which  were  caused  by  a combination  of  unrestrained  passengers  being 
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thrown  forward,  by  failures  of  seats,  and  by  slippage  of  a number  of  seat  belts. 

8.  Adequately  stressed  aft-facing  seats  probably  would  have  greatly  diminished  the  injuries  sus- 
tained in  this  accident  by  virtue  of  the  increased  body  support  offered  through  such  an  arrangement. 

9.  The  forces  generated  during  the  water  impact  approached  the  9 G design  strength  of  the  seats  and 
were  a factor  in  their  failure.  Since  impact  tolerance  of  the  human  body,  when  restrained  by  a seat  belt 
only,  has  been  established  on  the  order  of  15  to  20  G's,  the  failure  of  seats  at  the  9 G value  exposes 
occupants  to  serious  and  unnecessary  injuries. 

10.  At  least  seven  instances  were  reported  wherein  the  seat  belt  failed  to  restrain  its  user.  Slip- 
page of  the  "fabric-to-metal"  belt  has  been  found  in  other  accidents  and  this  condition  is  indicated  in 
this  accident.  The  demonstrated  inadequacy  of  the  locking  device  raises  serious  doubt  as  to  its  suitabili- 
ty as  a restraining  device. 

11.  The  contents  of  the  galley  were  spilled  during  the  deceleration  of  the  aircraft,  and  blocked 
ready  access  to  the  raft  package  as  well  as  the  emergency  exit  at  that  location.  Spillage  of  drawers  and 
bins  has  been  observed  in  many  other  accidents,  indicating  that  the  locking  devices  on  these  items  are 
unrel iable. 

12.  Through  analysis  of  the  movements  of  the  captain,  it  is  estimated  that  the  aircraft  floated  for 
approximately  5 to  6 minutes  after  landing  on  the  water  and  that  most  survivors  had  evacuated  the  aircraft 
within  2 to  3 minutes. 

13.  The  value  of  seating  knowledgeable  persons  next  to  emergency  exits  was  demonstrated  when  a pas- 
senger, who  made  it  a practice  to  prepare  himself  for  any  eventuality,  promptly  opened  the  aft  overwing 
emergency  exit.  This  opening  served  as  a focal  point  for  other  passengers  and  allowed  at  least  31  persons 
to  evacuate  the  cabin  through  this  exit. 

14.  The  naviqator  and  the  two  male  cabin  crew  members  were  unable  to  move  the  life  raft  package  after 
the  aircraft  came  to  a stop.  Weight  of  the  package  is  not  considered  a likely  factor  to  explain  this  dif- 
ficulty. The  only  other  plausible  explanation  is  that  the  galley  structure  shifted  during  impact  and  im- 
pinged on  the  raft  container,  thus  retaining  it  in  its  original  position. 

15.  The  navigator  and  the  steward  should  have  proceeded  to  the  overwing  exit  area  and  directed  pas- 
senger evacuation  after  the  aircraft  came  to  a stop.  Inadequacy  of  training  is  cited  for  their  failure 
to  do  so  in  that  no  evacuation  drills  were  given  as  part  of  their  training,  and  neither  of  them  was  in- 
timately familiar  with  the  survival  equipment  because  wet  ditching  drills  had  not  been  a part  of  their 
training  curriculum. 

16.  Additional  lives  could  possibly  have  been  saved  if  crew  leadership  had  been  exhibited  within  the 
aircraft  to  the  degree  such  leadership  was  shown  while  the  survivors  were  awaiting  rescue. 

17.  The  loss  of  all  life  rafts  on  board  the  aircraft  probably  affected  the  survival  of  several  pas- 
sengers. If  the  evacuation  slide  had  not  been  deployed  and  used  as  a rallying  point,  additional  lives 
might  have  been  lost  because  of  dispersion  of  the  survivors. 

18.  If  a slide-raft  combination  had  been  installed  in  this  aircraft,  at  least  one  raft  might  have 
been  available  without  the  necessity  of  dealing  with  the  cumbersome  and  time-consuming  method  of  launching 
and  boarding  the  raft.  The  slide-raft  combination  offers  a measure  of  automation  which  should  facilitate 
the  tasks  of  the  cabin  attendants. 

19.  Life  vests  were  found  to  be  restrictive  around  the  neck  and  gave  the  passengers  a low  level  of 
confidence  regarding  retention.  In  addition  to  the  difficulties  in  donning  the  vests,  the  passengers  had 
considerable  problems  finding  inflation  and  adjustment  controls. 

As  noted  by  the  NTSB  [p.  13  (12)],  "faulty  judgement  on  the  part  of  the  cockpit  crew,  inadequate  training 
of  the  entire  crew,  and  functional  failure  of  the  equipment"  combined  to  influence  the  fatal  outcome. 

To  date  these  cases  appear  to  represent  the  state  of  experience  in  jet  air  transport  ditchings,  and 
point  out  a number  of  problem  areas  which  will  require  improvement  for  increasing  the  prospects  of  sur- 
vivability in  future  ditchings. 


3.  PROTECTIVE  DEVICES  FOR  PASSENGERS  AND  CABIN  ATTENDANTS 
EXPOSED  TO  SMOKE,  FLAME,  AND  TOXIC  FUMES 


3.1  Background 


The  need  for  better  protection  of  passengers  and  crew  from  the  effects  of  toxic  fumes  and  inhalation 
of  smoke  or  flame  is  evident  from  investigations  of  both  civil  and  military  jet  transport  accidents.  Smoke 
inhalation  has  been  shown  to  be  a significant  factor  in  the  incapacitation  of  passengers,  resulting  in 
their  inability  to  evacuate  the  aircraft  prior  to  its  destruction  by  fire. 

It  has  been  found  that  the  collapse  through  smoke  inhalation  of  only  one  passenger  can  have  a direct 
and  very  deleterious  effect  upon  passenger  evacuation  flow,  particularly  when  the  affected  individual  is 
located  at  a critical  point,  such  as  in  the  aisle,  or  blocking  an  overwing  emergency  exit.  In  the  typical 
jet  transport  accidents  which  have  been  investigated  to  date,  decelerative  forces  are  often  found  to  be 
relatively  low  and  structural  deformation  impeding  escape  minimal.  Injuries  are  generally  minor  and  sus- 
tained during  escape  rather  than  at  impact,  yet  it  is  not  unusual  for  those  deaths  and  major  injuries  which 
occur  to  be  caused  by  smoke  and  fire.  While  there  is  a variation  in  the  heat  fluxes  generated  in  post- 
crash fires  (e.q.,  .54-1.35  gm-cal /cm2/min  [2-5  btu/ft2/min] ) , a fuselage  has  burned  through  in  as  little 
as  7 seconds  [Peterson,  1970  (553)].  In  tests  by  the  Flight  Safety  Foundation  the  cabin  temperature  reached 
948. 8°C  (1>740°F)  in  40  seconds,  and  in  ALPA  tests  conducted  at  Cleveland,  a 1,093.3°C  (2,000°F)  cabin 
temperature  was  recorded  in  less  than  2 minutes.  More  recent  studies  are  being  conducted  by  NASA.  While 
the  scope  of  this  paper  does  not  include  a detailed  analysis  of  materials  flammability,  toxic  gas  emission, 
smoke  emission,  or  flash  fire  hazards  in  post-crash  fire,  a brief  description  of  major  work  and  findings 
in  this  area  may  be  useful  background.  The  major  review  of  the  state-of-the-art  to  date  has  been  by 
Simpson  [1973  (563)]. 

3.1.1  Governmental  Activities:  FAA,  NTSB,  NASA,  NBS,  Congress.  Civil  air  carriers  are  required  by 

Federal  Air  Regulation  to  demonstrate- that  all  passengers  (maximum  passenger  capacity)  can  be  evacuated 
within  90  seconds  to  the  ground  or  ramp  steps  using  only  the  exits  on  one  side  of  the  aircraft  (FAR 
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25.803  [c ] ) [1967  (505)].  Yet  in  actual  emergencies  even  this  short  time  span  required  for  evacuation  may 
be  insufficient.  Military  recommendations  as  a result  of  one  C-135A  accident  included  a recommendation 
that  the  number  of  passengers  should  be  limited  to  those  able  to  evacuate  in  one  minute  from  three  exits. 

In  recognition  of  the  problem  of  toxic  gas  and  smoke  emission  from  the  pyrolysis  (chemical  decomposi- 
tion of  a substance  by  heat)  of  interior  materials,  the  Federal  Aviation  Administration  has  proposed  sev- 
eral new  standards  relative  to  transport  category  airplanes.  An  Advance  Notice  of  Proposed  Rule  Making 
(ANPRM)  was  published  30  July,  1969  [Notice  69-30;  34  F.R.  12450  (507)],  soliciting  views  on  four  questions 
upon  which  a Notice  of  Proposed  Rule  Making  (NPRM)  would  be  issued.  This  resulted,  six  years  later,  in  a 
proposal  to  amend  Parts  25  and  121  of  the  Federal  Air  Regulations  as  published  in  the  Federal  Register  [F.R. 
6506,  12  February,  1975  (510)].  It  was  based  upon  FAA  findings  at  that  time  that  aircraft  interior  mate- 
rials were  available  which  emitted  appreciably  less  smoke  than  the  currently  used  materials,  and  that  test 
methods  could  correctly  and  consistently  measure  the  smoke  emission  characteristics  of  aircraft  interior 
materials  [NBS,  1971  (543)].  What  was  not  fully  recognized  at  that  time  and  has  since  been  established  is 
that  chemicals  which  suppress  flame  or  smoke,  when  pyrolyzed,  may  emit  toxic  gases  in  lethal  quantities. 

More  recent  evidence  indicates  that  smoke  chamber  results  may  not  be  consistent,  and  one  of  the  current 
basic  problems  is  lack  of  an  accepted,  proven  test  protocol  which  is  consistent 

As  a result  of  the  Capitol  International  Airways  DC-8-63F  crash  at  Anchorage,  Alaska,  on  27  Novem- 
ber, 1970  (402;  403;  544),  the  National  Transportation  Safety  Board  recommended  that  FAA  cooperate  with 
NASA  to  develop  and  implement  major  Improvements  in  the  design  of  transport  aircraft  interiors  including 
"the  flammability  of  cabin  interior  materials"  (NTSB,  1971,  Status  of  Board  Safety  Recommendations).  On 
16  August,  1973  NTSB  staff  met  with  FAA  relative  to  planned  ANPRM  on  cabin  materials  toxicity  and  on  re- 
vised standards  for  materials  flammability  testing.  In  an  ANPRM  published  in  the  Federal  Register  [39 
F.R.  45044,  30  Dec.,  1974  (509)],  the  FAA  solicited  comments  related  to  compartment  interior  materials 
toxic  gas  emission;  however,  no  immediate  standards  may  be  expected  to  result  from  an  ANPRM.  Subsequently 
in  February,  1975  the  FAA  issued  an  NPRM  [40  F.R.  6506  (510)]  related  to  smoke  emission  from  compartment 
interior  materials.  On  13  March,  the  FAA  issued  the  first  ANPRM  soliciting  comments  relative  to  flammabil- 
ity standards  for  flight  attendant  clothing  [40  F.R.  11737  (511)].  Such  a need  has  been  cited  as  a result 
of  many  accidents  [Peterson,  1970  (553)]. 

Relative  to  materials  flammability  the  approach  after  World  War  II  was  to  limit  the  flammability  of 
cabin  materials  as  a primary  means  of  reducing  the  effects  of  post-crash  fire.  This  resulted  in  standards 
established  in  1947  limiting  the  horizontal  burn  rate  of  materials.  In  1962  tests  conducted  by  the  FAA 
at  National  Aviation  Facilities  Experimental  Center  (NAFEC)  indicated  that  many  materials  in  operational 
use  could  pass  this  standard  but  still  could  cause  fatal  fires  [Marcy  et  al . , 1964  (531)],  due  to  break- 
down of  test  protocol  between  laboratory  and  full-scale  tests.  These  standards  were  subsequently  stiffened 
in  1967  for  certain  cabin  materials  and  they  were  required  to  demonstrate  self-extinguishing  characteris- 
tics after  the  flame  was  removed.  In  1972  these  standards  were  expanded  to  all  cabin  materials  and  apply 
to  all  U.S.  certified  air  transports  certified  before  1967  to  be  retrofitted  to  current  standards  [Simpson, 
1973  (563)].  NASA  has  research  programs  related  to  the  development  of  more  fire  resistant  cabin  interior 
and  cabin  insulation  materials  [Kourtides  & Parker,  1972  (526)],  which  should  result  in  further  state-of- 
the-art  standards  relative  to  air  transport  aircraft  in  the  future.  The  advanced  space  research  activity 
of  NASA  has  produced  materials,  test  techniques,  and  data  which  must  be  considered  by  federal  regulatory 
agencies. 

Smoke  emission  tests  from  burning  materials  at  NAFEC  showed  a problem  for  emergency  egress  [Marcy, 

1965  (532)].  But  with  the  adoption  of  flammability  standards  it  was  found  that  the  flame  retardant  addi- 
tives used  increased  smoke  emissions  [Aerospace  Industries  Association,  CDP-2,  1968  (488)].  Subsequently 
the  National  Bureau  of  Standards  and  FAA  jointly  studied  smoke  and  gas  emission  from  141  aircraft  interior 
materials.  This  work  developed  the  NBS  Smoke  Chamber,  proposed  as  a compliance  test  apparatus  in  NPRM  on 
smoke  emission  from  compartment  interior  materials  as  of  12  February,  1975  [FAA  (510)].  Since  the  NBS 
apparatus  deals  with  small  smoke  samples,  FAA  contracted  with  Lockheed  Aircraft  Corporation  to  correlate 
the  NBS  Smoke  Chamber  data  with  full  scale  fire  tests  in  a Lockheed  L-1011  wide  body  jet  transport  fuse- 
lage section  [Lopez,  1973  (529)].  NASA  has  investigated  new  classes  of  polymers  which  are  non-flammable 
and  produce  little  or  no  smoke  or  toxic  gas  when  exposed  to  fire  [Simpson,  1973  (563)]. 

The  FAA's  proposed  program  approach  to  cabin  interior  flammability,  and  smoke  and  toxic  gas  emission 
involves  three  elements.  The  FAA  general  airworthiness  review  program,  initiated  in  December,  1974,  in- 
cludes raising  cabin  flammability  standards  for  older  aircraft  (as  one  of  more  than  600  changes  being  con- 
sidered). As  detailed  in  Part  8 of  a NPRM  published  20  June,  1975,  all  jet  transports  would  be  required 
to  have  cabin  interiors  that  meet  1972  flammability  standards  within  three  years  after  the  regulation  is 
adopted.  The  current  flammability  standards  for  older  jet  transports  were  issued  in  1967  and  required 
compliance  only  when  the  aircraft  was  next  overhauled  or  had  its  cabin  interior  refurbished.  In  1972  new 
flammability  standards  were  adopted  for  new  type  certified  aircraft,  such  as  the  Boeing,  McDonnell  Douglas, 
and  Lockheed  wide  body  jets.  The  main  difference  between  the  1967  and  1972  standards  were  the  more  rigor- 
ous requirements  for  seat  cushion,  upholstery,  and  carpet  materials.  The  latter  NPRM  was  issued  in  time 
for  materials  meeting  the  new  standards  to  be  used  in  the  Boeing  737  and  for  McDonnell  Douglas  to  meet 
some,  but  not  all,  of  the  1972  standards  in  its  DC-9  aircraft  [Klass,  1975  (525)]. 

The  12  February,  1974  NPRM  for  industry  and  user  comments  proposes  a new  standard  for  smoke  emission 
of  cabin  interior  materials,  requiring  retrofit  of  interiors  to  meet  the  new  specifications  during  the 
first  major  overhaul  or  refurbishment  that  occurred  after  five  years  from  the  effective  date  of  the  amend- 
ment of  Parts  25  and  121  of  the  FAR's.  There  would  be  a five-year  period  of  grace  if  the  standard  is 
adopted  as  proposed,  but  any  major  overhaul  or  cabin  interior  change  after  this  period  would  require  the 
use  of  low  smoke  emission  materials. 

In  the  ANPRM  published  30  December,  1974,  comments  were  requested  for  possible  standards  for  toxic 
gas  emission  from  cabin  interior  materials.  Due  to  the  limited  knowledge  of  the  relative  toxicity  of  dif- 
ferent materials  and  how  to  measure  and  specify  acceptable  levels,  it  has  been  estimated  "that  the  FAA 
will  not  be  in  a position  to  propose  a specific  set  of  standards  for  at  least  a couple  of  years.  Any  re- 


36 


quirement  for  retrofit  would  necessarily  be  at  least  several  years  in  the  future,  delaying  it  until  at 
least  the  early  1980's"  [Klass,  1975  (525)].  In  the  Aerospace  Industries  Association  response  to  the  FAA, 
a number  of  cabin  interior  materials  and  items  were  cited  for  which  there  are  no  substitute  materials  or 
construction  available  which  can  still  perform  the  intended  functions.  Their  list  included  acoustic  ceil- 
ing panels,  material  for  window  reveals,  Tedlar  acoustic  sandwich  panels  for  partitions  and  bulkheads, 
urethane,  vinyl  and  natural  rubber  seat  cushions,  as  well  as  cabin  windows  and  cockpit  side  windows.  Many 
items  currently  meeting  the  FAA  flammability  standard  would  not  meet  a toxicity  standard.  From  a group  of 
some  140  different  cabin  interior  materials,  the  FAA  has  narrowed  the  number  down  to  about  75  for  toxicity 
tests  to  be  conducted  during  1976-1977. 

An  investigation  in  early  1974  by  the  Special  Subcommittee  on  Investigations,  House  Interstate  and 
Foreign  Commerce  Committee  centered  on  concern  for  air  carrier  passenger  safety.  One  area  of  interest 
included  the  smoke  hood  as  a device  to  protect  passengers  and  crew  from  the  effects  of  toxic  fumes,  smoke, 
and  flame.  However,  it  was  decided  not  to  hold  hearings  but  rather  to  take  direct  action  with  the  FAA  to 
determine  why  such  devices  have  not  been  adopted  for  use  in  commercial  air  carriers  (512).  Further  Con- 
gressional interest  in  air  safety  has  been  shown  in  more  recent  hearings  [February,  1976  (572)]. 

3.1.2  8oeing  Smoke  Tests.  Smoke  evacuation  tests  were  conducted  by  Boeing  in  March  and  April,  1963, 
to  certify  the  Boeing  Commercial  Transport  Model  707-321C.  Tests  were  conducted  by  Pan  American  personnel 
using  two  707  aircraft.  Early  tests  were  made  to  evaluate  smoke  evacuation  and  smoke  penetration  charac- 
teristics of  a 8oeing  707-321C  convertible  model  and  those  of  a 707-321C  "stripped  freighter."  These 
tests  were  primarily  related  to  in-flight  smoke  air  flow  characteristics  and,  as  a result  of  the  crash  of 

a Pan  American  World  Airways  8oeing  707  (a  non-passenger  cargo  flight)  landing  at  Boston's  Logan  Airport 
on  3 November,  1973  [NTS8,  1974  (546)],  further  tests  were  made  by  8oeing  in  March,  1974.  8oth  of  these 
series  of  flight  tests  are  described  in  some  detail  in  the  10  March,  1975  issue  of  Aviation  Week  and  Space 
Technology  (540).  In  the  Logan  crash  the  presence  in  the  cockpit  of  dense  smoke,  which  was  continuously 
generated  and  uncontrollable,  was  determined  by  the  NTSB  to  be  the  probable  cause  of  the  accident.  Vision 
was  also  impaired.  Although  the  source  of  the  smoke  could  not  be  established  conclusively,  the  NTS8  (546) 
believed  that  the  spontaneous  chemical  reaction  between  leaking  nitric  acid,  improperly  packaged  and  stored, 
and  the  improper  sawdust  packing  surroundinq  the  acid's  package  initiated  the  accident  sequence.  One  by- 
product may  have  been  nitrogen  dioxide  (NO2),  formed  when  colorless  nitric  oxide  (NO)  reacts  with  oxygen 
in  the  absence  of  ultraviolet  light.  Orange  nitrogen  dioxide  in  sunlight  has  a half-life  of  less  than  30 
seconds.  Immediate  effects  of  inhaling  colored  nitrogen  dioxide  are  mild  irritation,  headache,  and  weak- 
ness TMaxey,  1975  (540)].  Cases  such  as  this  indicate  a need  for  adequate  crew  smoke  masks  as  well  as 
those  for  the  passenger. 

3.1.3  Fire  Tests  and  Flash  Fire  Effects.  Experimental  fire  tests  of  instrumented  aircraft  outfit- 
ted with  then-representative  interior  materials  were  conducted  by  the  Airline  Pilots  Association  (ALPA) 
and  indicate  that  smoke  density  approaches  saturation  in  two  to  two  and  one-half  minutes  [Heine,  1966 
(522)].  Detrimental  effects  to  both  vision  and  respiration  would  occur  much  sooner.  In  these  experiments 
temperature  rise  approaching  intolerable  levels  (248. 5°C  [480°F])  occurred  at  the  fifth  and  sixth  minutes, 
followed  characteristically  by  a flash  fire  with  temperatures  rising  in  excess  of  871°C  (1,600°F)  in  one 
or  two  minutes.  Smoke  density  and  temperature  measurements  in  other  tests  indicate  stratification  and 
localization,  with  flash  fires  reported  to  travel  through  the  fuselage  at  a rate  of  20.7  m/min  (68  ft/min) 
[Marcy,  1965  (532)]. 

In  order  that  evacuation  may  be  accomplished  before  the  cabin  or  flight  deck  areas  become  uninhabit- 
able due  to  elevated  temperatures,  the  protection  of  the  human  respiratory  system  is  of  critical  importance. 
The  occupant  must  remain  mobile  and  in  a conscious  state  post-crash  in  order  to  effectively  evacuate. 
Clinical  investigations  have  shown  that  shock  may  not  be  an  important  factor,  accounting  for  a low  (20%) 
fatality  in  burn  cases  [Phillips,  1960  (554)],  while  respiratory  tract  trauma,  with  or  without  superimposed 
respiratory  tract  infection,  may  account  for  nearly  50%.  Yet  where  facial  burns  are  incurred,  more  than 
three- fourths  of  the  victims  may  develop  respiratory  difficulties  due  to  inhalation  of  flame.  It  has  been 
reported  that  if  the  lower  respiratory  tract,  consisting  of  the  trachea,  main  bronchi,  and  secondary  bron- 
chi, is  burned,  a fatality  is  usually  inevitable  [Connell,  1960  (498)]. 

In  cabin  fires  injuries  to  the  skin  and  respiratory  system  are  the  primary  concern.  Occupants  ex- 
posed to  heat  have  widely  varied  tolerances.  Survival  is  dependent  upon  one's  tolerance  to  pain  and  the 
thermal  level  at  which  his  exposed  skin  will  suffer  second  degree  burning.  Normal  individuals  experience 
pain  when  human  skin  is  heated  to  45°C  (113°F).  At  40°C  ( 1 20° F ) the  rate  of  cellular  destruction  is  more 
rapid  than  cellular  repair  [USAF,  1974  (298)].  Inhalation  of  hot  gases  produced  by  a crash  fire  creates 
the  possibility  of  respiratory  system  injuries,  but  information  concerning  human  tolerances  is  very  limit- 
ed. The  highest  known  ambient  temperature  to  which  a human  respiratory  system  has  been  exposed  without 
damage  is  198. 8°C  (390°F)  [USAF,  AFSC  DHI-6  39.4,  1974  (298)]. 

Flash  fires  occur  when  the  combined  mixture  of  smoke,  gases  and  oxygen  in  the  burning  cabin  environ- 
ment reaches  a temperature  at  which  ignition  occurs,  and  all  of  the  oxygen  in  the  cabin  is  consumed,  pre- 
cluding survival.  Temperatures  may  reach  in  excess  of  815. 5°C  (1,500°F)  in  less  than  a second  and  ignite 
the  entire  cabin.  Although  no  new  NASA  studies  related  to  investigation  of  this  phenomenon  have  been  re- 
ported at  this  date,  the  National  Bureau  of  Standards  and  NAFEC  are  continuing  research  on  flash  fires. 

This  continues  work  reported  in  1973  concerning  burning  polyurethane  foam  cushions  [Paabo  et  al . , 1973 
(549)]. 


3.1.4  Flight  Deck  Crew  Smoke  Mask  Protection.  The  FAA  in  recent  tests  conducted  at  the  Civil  Aero- 
medical  Institute,  has  evaluated  137  devices  intended  to  provide  flight  deck/crew  smoke  protection  [1975 
(535)].  These  included  124  devices  previously  approved  by  the  FAA  on  a basis  of  static  fit,  as  well  as 
13  experimental  prototypes  provided  by  the  manufacturers.  Of  these,  14  mask/goggle  combinations,  6 full 
face  masks,  and  2 hood  devices  passed  the  test  criteria.  The  criteria  established  involved:  (l)  no  more 

than  5%  contaminant  leakage  into  the  respiratory  portion  of  the  device,  and  (2)  no  more  than  10%  contami- 
nant leakage  into  the  visual  portion  of  the  device.  If  the  mask  happened  to  be  designed  so  that  the 
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respiratory  and  visual  portions  were  combined,  as  in  full  face  masks  or  hoods,  the  5%  contaminant  criteria 
applied.  All  of  the  equipment  which  passed  this  test  was  designed  for  and  tested  with  “safety"  or  "emer- 
gency pressure."  Since  adequate  performance  wearing  corrective  glasses  is  a requirement  of  the  applicable 
FAR,  all  subjects  in  these  tests  wore  standardized  corrective  glasses. 

The  results  of  these  tests  indicated  that  the  most  significant  problem  was  the  effect  on  leakage, 
fit,  and  displacement  of  the  equipment  induced  by  glasses.  On  the  other  hand,  the  respiratory  protection 
of  oral -nasal  masks  was  generally  good.  It  was  found  that  in  many  of  those  devices  which  passed  this  test 
the  "safety"  pressure  required  to  compensate  for  large  leakage  areas  induced  such  a leakage  and  waste  of 
oxygen  that  the  aircraft  crew  supply  would  be  depleted  in  a very  short  time.  It  was  concluded  that  eye 
protection  remained  a principal  problem.  Since  few  of  those  flight  deck/crew  smoke  protection  devices 
presently  approved  by  the  FAA  were  found  to  offer  protection  at  the  levels  established  in  the  tests,  re- 
sults and  proposed  regulatory  changes  were  discussed  in  a meeting  between  FAA,  equipment  and  airframe  manu- 
facturers, air  carriers,  and  pilot  groups,  which  was  held  at  the  FAA  Aeronautical  Center,  Oklahoma  City, 
11-12  December,  1975.  Since  the  emphasis  in  this  chapter  is  upon  passenger  and  cabin  attendant  protection, 
rather  than  crew/flight  deck  protection,  it  should  be  noted  that  some  quite  different  objectives  and  cri- 
teria are  involved,  and  crew  smoke  masks  utilizing  the  aircraft  oxygen  system  should  not  be  confused  with 
passenger  and  cabin  attendant  smoke  protective  devices  intended  for  emergency  egress. 

3.1.5  Toxic  Gases.  The  National  Bureau  of  Standards  tests  for  FAA  in  1968  [Higgins  et  al . , 1971 
(524)]  and  the  Aerospace  Industries  Association  full  scale  tests  in  1968  (488,  489)  measured  toxic  gas 
concentrations,  although  emphasis  was  on  fire  control  and  suppression  techniques.  More  recently,  attempts 
to  reduce  the  toxic  gas  emissions  of  burning  cabin  interior  materials  by  tests  of  improved  materials  has 
been  underway  by  FAA  at  NAFEC,  and  at  Ames  Research  Center  at  Mountain  View  and  Johnson  Space  Center  at 
Houston.  This  work  is  reported  to  be  successful  in  regard  to  flammability,  but  incomplete  in  terms  of 
smoke,  toxicity,  and  practical  use  considerations  [Simpson,  1973  (563)].  Simpson  also  reports  work  under- 
way by  the  Society  of  the  Plastics  Industry  to  study  plastic  material  toxic  gas  emission,  under  funding 
to  the  National  Bureau  of  Standards  and  the  Southwest  Research  Institute  to  conduct  tests  in  coordination 
with  the  FAA's  work  at  NAFEC. 

A concise  review  of  the  physiological  and  toxicological  aspects  of  smoke  during  fire  exposure  was 
conducted  by  the  University  of  Utah  for  NAFEC  [Einhorn,  lg73  (501,  502)]  and  should  be  consulted  for  more 
detailed  evaluation  and  critique  of  laboratory  test  procedures  and  human  tolerances.  In  a subsequent 
study,  rigid-  and  flexible-urethane  foams  were  evaluated  at  the  University  of  Utah's  Flammability  Research 
Center  for  flammability  characteristics  and  thermal  degradation  of  urethane  cellular  plastics  used  in  air 
transport  cabin  interiors  [Einhorn  et  al.,  1973  (501,  502)]. 

3. 1.5.1  Air  Carrier  Accident  Findings.  In  the  AIA  study  of  1968  (488),  industry,  CAB,  and 
FAA  accident  files  were  searched  for  detailed  information  on  air  carrier  jet  accidents  prior  to  1967.  Of 
170  accidents,  fires  were  known  to  have  occurred  in  74  and  there  were  significant  fuel  spills  in  50.  Six 
were  interior  fires.  In  48  accidents  the  aircraft  fuselage  was  ruptured,  with  fuel  spillage  occurring  in 
34  of  these.  In  the  total  of  170  accidents  (world-wide)  applicable  to  the  AIA  study,  it  was  concluded 
that  35  accidents  with  1,881  fatalities  were  unsurvivable,  16  accidents  with  539  fatalities  were  impact- 
survivable  with  fatalities,  and  119  involved  accidents  or  incidents  having  no  fatalities. 

However,  toxic  gas  emission  from  burning  cabin  materials  has  only  recently  had  serious  attention  as 
a result  of  findings  in  several  major  accidents  occurring  within  the  past  decade.  Accidents  which  have 
been  of  particular  note  in  this  regard  include: 

(1)  Before  noon  on  11  July,  1961,  a United  Airlines  McDonnell  Douglas  DC-8  crashed  during  a landing 
at  Stapleton  Field,  Denver,  Colorado.  Soon  after  the  aircraft  stopped  two  major  fires  broke  out;  however, 

98  passengers  escaped  prior  to  cabin  fire.  There  were  17  fatalities  with  no  signs  of  impact  trauma.  Smoke, 
from  the  chimney  effect  when  the  aft  galley  door  was  opened,  was  the  major  egress  hazard,  and  17  passengers 
were  fatally  overcome.  Blood  carboxyhemoglobin  concentrations  were  determined  from  heart  blood  samples  of 
all  victims  and  ranged  between  30  and  85%  [Hasbrook  et  al.,  1962  (397);  Snow  et  al.,  1971  (424)]. 

(2)  After  dark  on  11  November,  1965,  a United  Airlines  Boeing  727  crashed  during  a landing  at  Salt 
Lake  City  Municipal  Airport.  The  rate  of  descent  on  final  approach  was  914.4  m/min  (3,000  ft/min),  touch- 
down was  at  228  km/h  (141.6  mph),  and  as  the  gears  sheared,  the  aircraft  skidded  for  853  m (2,800  ft)in 
about  27  seconds,  with  a mean  deceleration  of  0.25  G,  and  came  to  rest  engulfed  in  flame  to  an  area  forward 
of  the  wing.  Of  85  passengers  aboard  the  aircraft  there  were  41  fatalities,  and  of  the  44  survivors  only 
11  were  uninjured.  Carboxyhemoglobin  determinations  from  heart  blood  samples  of  35  victims  ranged  from 

13  to  82%  with  a mean  value  of  36.9%  (10%  is  ordinarily  considered  the  top  limits  of  normal).  Blood  etha- 
nol determinations  from  35  victims  resulted  in  17  displaying  positive  values  between  0.1  and  1.0  mg/ml, 
although  one,  at  1.5  mg/ml,  fell  in  the  range  of  intoxication  where  judgement  may  be  considered  impaired. 
These  values  could  be  associated  with  post-mortem  changes,  and  were  not  considered  a significant  factor 
in  emergency  egress.  Fatalities  were  attributed  to  smoke  inhalation  and  cabin  fire  [Snow  et  al.,  1971 
(424)]. 

(3)  On  the  afternoon  of  23  November,  1964  a Trans  World  Airlines  Boeing  707-331  with  a crew  of  11 
and  62  passengers  aboard,  crashed  in  an  attempted  aborted  takeoff  at  Fiumicino  Airport,  Rome,  Italy.  While 
still  traveling  at  an  estimated  velocity  of  64  km/h  (40  mph)  it  struck  a steam  roller,  continuing  some 
243.8  m (800  ft)  in  the  next  22  seconds.  Twenty  seconds  after  stopping,  a center  fuselage  tank  exploded 
and  fire  rapidly  spread.  The  fire  equipment  arrived  3 minutes,  45  seconds  after  the  accident  (Fig.  22). 

This  accident  was  fatal  to  45  passengers  (72.5%).  Of  the  17  survivors,  10  received  minor  injuries  and  7 
were  hospitalized.  Carboxyhemoglobin  (COHgb)  elevations  of  the  24  fatalities  found  in  the  cabin  were  from 
13.8%  to  49.0%,  although  two  were  only  3.0%  and  10.4%.  In  general,  death  was  attributed  to  thermal  burns 
or  asphyxia,  whether  the  victims  were  found  inside  the  cabin  or  were  among  the  17  whose  bodies  were  found 
outside  the  cabin.  In  those  outside  the  cabin,  COHgb  values  were  generally  below  10%,  but  were  as  high 

as  35.8%.  Four  victims  died  later,  primarily  of  thermal  burns  [Snow  et  al . , 1971  (424)]. 


Fig.  22.  Fire  and  heavy  smoke  resulted  in  45  fatalities  of  62  passengers  in  this  Trans  World  Airlines 
Boeing  707-331  accident  at  Fiumicino  Airport,  Rome,  23  November,  1964  (Photo  courtesy  FAA) . 


(4)  On  27  November,  1970  (1705  AST)  following  an  unsuccessful  takeoff  attempt,  a Capitol  Interna- 
tional Airways,  Inc.,  McDonnell  Douglas  DC-8-63F  crashed  and  burned.  The  flight  was  being  operated  as  a 
Military  Airlift  Command  (MAC)  contract  flight  and  there  were  219  passengers  and  a crew  of  10  aboard.  46 
passengers  and  1 flight  attendant  were  fatally  injured  as  a result  of  the  post-crash  fire  [Leroy,  1971 
(402,  403);  NTSB  (209)]. 

(5)  An  Allegheny  Airlines  Allison  Prop  Jet  Convair  340/440  crashed  into  cottages  while  making  an 
instrument  approach  to  the  Tweed-New  Haven  Airport,  Connecticut  at  0949  EDT  on  7 June,  1971.  The  aircraft 
was  destroyed  and  28  passengers  and  two  crew  members  were  fatally  injured;  only  two  passengers  and  the 
1st  officer  survived.  Autopsy  and  toxicological  examination  of  26  of  the  fatalities  indicated  that  all 
had  died  of  chemical  asphyxiation  and/or  thermal  injury  [NTSB,  1972  (216)]. 

(6)  At  1428  CST  on  8 December,  1972,  a United  Airlines  Boeing  737-222  crashed  and  burned  in  a resi- 
dential area  about  2.4  km  (1.5  mi)  short  of  the  runway  while  on  instrument  approach  to  Chicago-Midway  Air- 
port. Of  55  passengers  and  6 crew  members  aboard,  40  passengers  and  3 crew  members  were  killed,  and  2 
persons  on  the  ground  also  received  fatal  injuries.  Since  there  were  allegations  of  foul  play  related  to 
this  accident,  the  trauma  of  non-survivors  was  closely  examined.  Elevated  hydrogen  cyanide  levels  were 
found  in  the  captain  and  six  coach  passenger  fatalities  [NTSB,  1973  (247)]. 

(7)  On  20  December,  1972  at  1800  CST  a North  Central  Airlines  McDonnell  Douglas  DC-9-31  and  a Delta 
Air  Lines  Convair  880  collided  at  an  intersection  at  the  O'Hare  International  Airport,  Chicago.  The  DC-9 
was  taking  off  and  the  CV-880  was  taxiing  at  the  time  of  the  collision.  The  DC-9,  with  41  passengers  and 
a crew  of  4,  was  destroyed  by  impact  and  fire.  Nine  of  the  10  fatally  injured  passengers  failed  to  escape 
from  the  aircraft,  and  smoke  was  reported  to  have  been  dense  within  the  cabin  [NTSB,  1 g73  (545)]. 

(8)  On  3 November,  1973  a Pan  American  World  Airways  Boeing  707-321C  crashed  on  final  approach  to 
Logan  International  Airport,  Boston,  Massachusetts.  The  crew  of  three  reported  excessive  smoke  in  the 
cockpit  which  reached  such  severity  that  the  aircraft  could  not  be  controlled.  The  in-flight  smoke  was 
caused  by  improper  packaging  of  hazardous  nitric  acid  cargo,  and  caused  the  subsequent  non-survi vabl e 
crash  [NTSB,  1974  (546)]. 

(9)  A Varig  Boeing  707  approaching  Paris  on  11  July,  1973  also  incurred  an  in-flight  fire,  possibly 
originating  in  a lavatory,  and  forced  an  emergency  crash  landing  near  Paris.  A reported  120  deaths  re- 
sulted from  in-flight  toxic  gas  inhalation;  the  only  occupants  surviving  were  the  flight  deck  crew  who  had 
masks . 


The  majority  of  the  356  fatalities  in  these  nine  air  carrier  accidents  have  been  attributed  to  the 
toxic  effects  of  smoke  and  fumes  or  the  thermal  effects  of  fire.  In  the  three  crashes  (l)-(3)  cited  above, 
105  of  261  passengers  aboard  died  in  attempts  to  escape  during  the  one  to  three  minutes  prior  to  the  build- 
up of  a lethal  thermo-toxic  environment  within  the  cabin.  Fig.  23  shows  the  dense  smoke  and  flames  typi- 
cal of  post-crash  fires.  This  crash  of  a Boeing  727  at  St.  Thomas,  Virgin  Islands  [NTSB,  1971  (203)]  in- 
volved 46  passengers,  2 infants,  and  a crew  of  7,  with  2 fatalities.  If  passengers  in  this  type  of  acci- 
dent can  be  protected  from  the  immobilizing  and  incapacitating  effects  of  inhalation  of  smoke,  toxic  gases, 
and  flame  for  only  one  to  two  minutes  of  additional  evacuation  time  prior  to  the  build-up  of  intolerable 
temperatures  within  the  cabin,  it  seems  that  a significant  increase  in  passenger  survival  can  be  attained. 
In  some  situations,  however,  additional  evacuation  time  may  be  required. 
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Fig.  23.  Oense  smoke  and  fire  following  crash  of  Boeing  727  at  St.  Thomas,  Virgin 
Islands  28  December,  1970  (203)  (Photo  courtesy  NTSB) . 


3. 1.5. 2 Carbon  Monoxide  and  Hydrogen  Cyanide.  The  accidents  noted  above  were  investigated 
for  carbon  monoxide  and/or  hydrogen  cyanide  in  victim  blood  levels.  Results  of  these  studies  are  shown  in 
Table  XI. 


TABLE  XI. 

CARBON  M0N0X I 0E  ANO  CYANIOE  FINOINGS  IN  AIR  TRANSPORT  ACCIOENTS 
A.  CARBON  M0N0XI0E  IN  AIR  TRANSPORT  ACCIDENTS 


Accident 

Total 

Passengers 

Fatal 

Passengers 

Passengers 
Tested  For 
Carbon  Monoxide 

Carbon  Monoxide 
(as  Blood 

Carboxyhemoglobi  n) 

Oenver  DC-8 

114 

17 

17 

30-85%  range 
(mean  = 62%) 

Rome  707 

62 

45 

24 

3-49%  range 
(mean  = 23%) 

Salt  Lake  City  727 

85 

43 

35 

13-82%  range 
(mean  = 37%) 

105 

76 

B.  CARBON  MONOXIDE  AND  CYANIOE  IN  AIR  TRANSPORT  ACCIDENTS 


Accident 


Carbon  Monoxide 
(as  Blood  Carboxyhemoglobin) 
in  Fatal  Victims 


Cyanide  in  Blood  Sample 


Anchorage  DC-8 
New  Haven  580 
Chicago  737 


19  positive 
(5-69%  range) 


23  positive 
(9-49%  range) 


Pilot  40% 


18  positive 

(0.01  ug/ml  to  2.26  ug/ml 
range) 

23  positive 

(0.007  ug/ml  to  3.38  ug/ml 
range) 


Pilot  3.9  ug/ml 


Chicago  OC-9 


9 positive 
(26-64%  range) 


9 positive 

(1.10  pg/ml  to  2.65  u9/ml 
range) 


Source:  Mohler,  1975  (542) 
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Although  many  toxic  gas  products  are  generated  during  a crash  fire,  carbon  monoxide  (CO)  may  be  the 
most  significant  because  small  percentages  of  CO  can  produce  serious  consequences.  The  effects  of  various 
concentrations  of  CO  are  illustrated  in  Tables  XII  and  XIII. 


TABLE  XII.  TABLE  XIII. 

EFFECTS  OF  VARIOUS  CONCENTRATIONS  OF  PHYSIOLOGICAL  EFFECTS  OF  VARIOUS  CARBON 

CARBON  MONOXIDE  IN  AIR  AT  SEA  LEVEL  MONOXIDE  HEMOGLOBIN  PERCENTAGES 


% Of  CO 

in  Air  Effects 


Carboxy hemoglobin 

Percentage  Symptoms 


1.28 

Immediate  effect,  unconsciousness 
and  danger  of  death  in  1-3  min 

100 

0.64 

Headache  and  dizziness  in  1-2  min; 
unconsciousness  and  danger  of 
death  in  10-15  min 

90 

80 

0.32 

Headache  and  dizziness  in  5-10  min; 
unconsciousness  and  danger  of 

70 

death  in  30  min 

60 

0.16 

Headache,  dizziness  and  nausea  in 

20  min;  collapse,  unconsciousness, 
possibly  death  in  2 hr 

50 

0.08 

Headache,  dizziness  and  nausea  in 
3/4  hr;  collapse  possibly  un- 

40 

consciousness  in  2 hr 

30 

0.04 

Frontal  headache  and  nausea  after 
1-2  hr;  occipital  after  2-1/2  to 
3-1/2  hr 

20 

0.02 

Possible  mild  frontal  headache  in 

2-3  hr 

10 

Source: 

HIAD,  USAF,  AFSC  DHI-6  DN  395, 
p.  4,  20  July,  1974  (298) 

0 

Immediate  death 

Unconsciousness, 
respiratory  failure, 
death  in  long  exposure 


Headache,  disorientation, 
collapse,  fainting 

Pronounced  headache, 
fatigue,  irritability, 
judgment  impaired 


Shortness  of  breath 
during  moderate  exertion, 
minor  headache 


No  major  effect  except 
shortness  of  breath  on 
extreme  physical  activity 


No  effect 


Source:  HIAD,  USAF,  AFSC  DHI-6  DN  395, 

p.  4,  20  July,  1974  (298) 


A rapid  estimation  of  carboxyhemoglobin  from  expired  breath  after  carbon  monoxide  exposure  has  been 
developed  by  Stewart  et  al . [1976  (566)],  utilizing  a portable  electrochemical  cell. 

Mohler  [1975  (542)]  has  discussed  the  causation  of  the  production  of  toxic  products  from  cabin  fires 
and  provided  some  alternative  solutions.  Carbon  monoxide  levels  have  been  shown  to  rapidly  exceed  physi- 
ological tolerances  in  post-crash  fire  tests  [Einhorn,  1972  (501,  502);  Gross  et  al.,  1968  (518);  Heine 
and  Brenneman,  1966  (522);  AIA,  1968  (488)].  In  full  scale  tests  cabin  carbon  monoxide  levels  of  10,000 
parts  per  million  were  reached  in  90  seconds,  and  in  another  test  26,000  ppm  in  180  seconds.  Mohler  notes 
this  is  above  the  fatal  level  for  a 2.5  minute  exposure  but  that  incapacitation  may  occur  at  lower  levels. 

Hydrogen  cyanide  and  carbon  monoxide  result  from  the  thermal  decomposition  of  most  organic  materials 
such  as  wood,  cotton,  paper  and  plastics,  or  human  hair.  In  addition,  many  specific  cabin  interior  fix- 
tures and  materials,  including  polyurethane  used  in  seat  cushions,  carpet  pads  and  hat  racks;  acryloni tri le- 
butadiene-styrene  used  in  passenger  service  unit  window  structures;  modacrylics  used  in  dust  panes;  and 
wool  used  in  seat  upholstery.  Similar  materials  may  be  carried  into  the  cabin  by  passengers.  In  the  tests 
referenced  above  cyanide  (hydrogen  cyanide)  exceeded  4,000  ppm  in  90  seconds,  above  a fatal  level  for  this 
time  exposure.  Mohler  [1975  (542)]  points  out  that  incapacitation  may  occur  "perhaps  at  half  the  fatal 
concentration."  Thus  while  coma  and  death  begin  to  occur  at  the  60-70%  blood  level  range,  30%  blood  car- 
boxyhemoglobin produces  severe  headache,  weakness,  dizziness,  dimness  of  vision,  nausea,  vomiting,  and 
collapse.  Similarly,  while  cyanide  causes  death  at  about  the  5 ug/ml  blood  level,  incapacitation  can 
occur  at  half  that.  Combined,  lethal  effects  could  be  expected  with  a blood  carbon  monoxide  of  20%  plus 
a blood  cyanide  of  approximately  2 pg/ml . Of  all  the  plastic  polymers,  polyvinyl  chloride  has  been  im- 
plicated primarily  in  causing  the  most  serious  problem  among  fire  fighters  because  it  releases  hydrogen 
chloride  gas  when  burning.  Dyer  and  Esch  [1976  (500)]  have  reported  on  175  fire  fighters  who  experienced 
symptoms  from  its  toxicity  from  1 g70  to  1975. 

Higgins  et  al . [1971  (524)]  in  tests  of  the  combined  inhalation  toxicity  of  carbon  monoxide,  hydro- 
gen cyanide,  and  other  toxic  gases  have  found  that  these  toxic  substances,  when  inhaled  in  combination, 
can  be  more  lethal  than  when  inhaled  separately.  Mohler  [1975  (542)]  has  suggested  the  use  of  new  materi- 
als for  possible  retrofitting  of  existing  aircraft  and  use  in  future  aircraft;  however,  more  recent  NASA 
studies  have  suggested  that  even  materials  such  as  Nomex,  Tedlar,  or  fiberglass  are  not  as  satisfactory  as 
first  thought.  (Tedlar  is  the  duPont  trade  name  for  polyvinyl  fluoride  decorative  panel  surface  and  Tef- 
lon is  the  duPont  trade  name  for  fluorocarbon  polymer.  Kynar  is  the  Raychem  Corporation's  trade  name  for 
polyvinyl idene  fluoride  plastic  material,  and  Nomex  is  the  duPont  trade  name  for  its  high-temperature- 
resistant  nylon,  formed  in  fabric  or  paper.)  Current  NASA  investigations  indicate  that  a polyimide  foam 
may  be  acceptable  as  a substitute  cushion. 

Both  the  Environmental  Protection  Agency  (EPA)  and  the  Occupational  Safety  and  Health  Administration 
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(OSHA)  have  set  air  pollution  and  exposure  limits  to  vinyl  chloride  (VC),  a colorless  gas  derived  from 
chlorine  and  petrochemicals,  which  is  the  major  ingredient  in  polyvinyl  chloride  (PVC),  used  in  some  in- 
terior materials  [Time,  1974  (567)].  While  these  long-term  standards  relate  primarily  to  workers  in  the 
manufacturing  process,  they  indicate  the  mounting  concern  and  emphasis  for  short-term  exposure  in  future 
aircraft  for  non-toxic  and  non-flammable  materials.  Unfortunately , while  there  is  much  known  about  long- 
term exposure  toxicity  data,  little  is  understood  by  toxicologists  about  acute  short-term  exposure  typi- 
fied by  an  aircraft  crash  fire. 

In  1973  the  Committee  of  the  French  Aerial  Transport  (CFAT) , VTA,  Air  France,  and  Air  Inter  formed 
a commission  to  study  the  problem  of  on-board  fires.  This  included  a group  to  study  materials,  an  inquiry 
qroup,  and  a medical  group.  Dr.  Fourn,  Medicine  Chief  of  VTA  in  Paris  presented  the  toxicological  findings 
resulting  from  the  medical  portion  of  this  study  at  the  XXII  International  Meeting  on  Aviation  and  Space 
Medicine  in  Beirut  in  October,  1974  [Fourn,  1974  (517)].  Six  materials  from  cabin  interiors  of  the  Mc- 
Donnell Douglas  DC-9  and  DC-10  were  found  to  yield  combustion  products  of  carbon  monoxide,  as  well  as  some 
hydrochloric  acid.  In  addition,  certain  cyanhydric  (hydrocyanic)  acids  were  detected.  Papago  Harmonic 
and  Polypi astex  produced  sulfuric  acid;  Papago  Harmonic,  Moquette  RK,  Mousse  Tramico,  and  the  Taraflex  RK 
produced  some  nitrogen  oxides. 

Plastic  interior  materials  from  the  Boeing  707,  when  burned,  were  found  to  emit  carbon  monoxide, 
carbon  dioxide,  hydrochloric  acid,  hydrofluoric  acid  (FI uorhydrigue) , hydrogen  fluoride,  and  hydrogen 
sulfide.  Since  each  airline  specifies  its  own  particular  interiors,  however,  there  may  be  some  difference 
between  them. 

In  addition  to  the  above  aircraft,  tests  were  also  performed  on  the  combustible  products  of  six 
plastic  materials  from  the  Caravel le  aircraft.  Results  of  combustion  showed  that  carbon  monoxide,  carbon 
dioxide,  and  hydrocarbons  were  common  to  all.  Specific  to  certain  materials  were  hydrochloric  acid  (with 
Royal ite  [ABS] ,Makrolon , Panneau  sandwich,  and  traces  with  Nomex),  hydrogen  fluoride  (with  wool  and  Royal - 
ite  [ABS]),  sulfuric  acid  and  hydrocyanic  acid  (with  wool  and  linings).  In  reference  to  the  Varig  1973 
accident  near  Paris,  Fourn  stated  that  108  passengers  had  died  of  carbon  monoxide  inhalation,  and  12  others, 
after  histological  studies,  were  found  to  have  died  of  suffocation  resulting  from  the  reflex  inhibition  of 
respiration  under  the  action  of  the  chlorinated  by-products  and  fluorides  affecting  the  mucous  membranes 
of  the  nose  and  pharynx. 

3.1.6  Military  Studies . Military  as  well  as  civil  air  transport  accidents  have  indicated  the  major 
influence  of  post- crash  fire  on  survival.  A review  of  survivable  USAF  passenger-carrying  aircraft  acci- 
dents resulted  in  the  conclusion  that  fire  was  a prime  factor  in  limiting  the  successful  egress  of  the 
passengers  [Reagin  et  al . , 1969  (13)].  Studies  by  Sawyer  [1967  (16)]  of  196  cargo/transport  accidents  in- 
volving 1,899  occupants  occurring  from  1962  to  June,  1967  indicate  the  overall  incidence  of  fire  was  35%. 

Of  these,  69  USAF  cargo/transport  accidents  involved  fire  during  this  period,  and  16  resulted  in  major  or 
fatal  fire  injuries.  74%  (or  139)  of  the  189  fatalities  were  attributed  to  fire,  resulting  in  the  obser- 
vation that  "the  risk  for  aircrew  was  34%,  whereas  93%  of  all  passenger  fatalities  were  due  to  fire" 

[Sawyer,  1967  (16)].  Reviewing  40  selected  USAF  passenger-carrying  accidents  from  1964  through  1968, 

Brown  (1969)  found  that  many  fatalities  occurred  even  though  the  crash  itself  was  survivable.  This  was 
confirmed  by  recent  review  by  the  author  of  30  Boeing  C-135  accidents  occurring  from  1964  to  date,  and 
14  Lockheed  C-141  accidents  from  1968  to  date.  In  one  case  involving  a C-135  accident,  a small  on-board 
auxiliary  power  unit  caught  fire  upon  impact,  and  11  passengers  died  from  smoke  (asphyxiation  secondary  to 

hypoxia  and  inhalation  of  smoke)  when  they  failed  to  evacuate  in  time.  In  this  accident  30  passengers 

were  uninjured.  One  recommendation  resulting  from  the  investigation  was  "that  commercially  available  safe- 
ty hoods  be  obtained  and  tests  conducted"  [Solt,  1969  (565)]. 

A 1970  USAF  study  of  emergency  escape  and  survival  from  transport  aircraft  concluded  that  "a  simple 
lightweight  bag-shaped  smoke  hood... would  lengthen  the  survival  time  by  providing  three  to  four  minutes 
of  clean  air  to  breathe  inside  the  hood.  In  addition,  the  hood  would  provide  adequate  visibility  enabling 
the  passenger  to  see  escape  hatches  and  allow  mobility  to  complete  the  evacuation  of  the  aircraft.  By 
providing  additional  survival  time  and  visibility,  the  evacuation  and  survival  would  be  enhanced.  Indi- 
vidual smoke  hoods  can  be  made  available  by  attaching  a hood  to  each  seat  in  the  aircraft"  [Reagin  et  al . , 
1969  (13)]. 

3.2  Protective  Devices 


3.2.1  Background.  Research  and  development  of  passenger  smoke  hoods  have  continued  sporadically 
during  the  past  ten  years  as  a result  of  the  initial  work  of  E.B.  McFadden  at  the  FAA  Civil  Aeromedical 
Institute  which  started  in  the  fall  of  1965.  A number  of  smoke  mask  devices  have  been  proposed  or  tested, 
and  16  versions  of  these  are  considered  in  this  section.  However,  emphasis  is  on  the  Schjeldahl  (now 
"Sheldahl")  smoke  hood  since  this  has  had  the  most  extensive  testing  and  is  a currently  available  protec- 
tive device.  As  a result  of  investigation  of  the  Salt  Lake  City  Boeing  727  crash  evacuation  on  11  Novem- 
ber, 1965,  McFadden  constructed  several  working  models  of  polyethylene  (non-flame  resistant)  hoods  to 
test  feasibility  of  the  concept.  Learning  that  duPont  Chemical  Company  had  a polyimide  flame-resistant 
and  transparent  plastic  film,  he  contacted  the  Schjeldahl  Company  in  December,  1965  to  fabricate  five 
polyimide  hoods.  However,  in  these  experimental  hoods  the  adhesive  was  of  insufficient  strength.  By  May, 
1966,  the  defective  adhesive  hoods  were  replaced  by  five  more  using  a Schjeldahl  proprietary  adhesive,  and 
were  followed  in  September,  1966  by  Schjeldahl -fabricated  hoods  with  metallic  coatings  [Reynolds,  1966 
(557)]. 

The  results  of  the  initial  study  [McFadden  et  al . , 1967  (538)]  and  subsequent  comprehensive  multi- 
disciplinary investigations  [McFadden  et  al . , 1968  (537);  McFadden  and  Smith,  1970  (539);  McFadden,  1970 
(534);  McFadden  and  Gibbons,  1970  (536);  Lewis,  1970  (528);  Tobias,  1970  (568);  and  Smith,  1970  (564)] 
represent  the  most  exhaustive  studies  published  to  date  of  this  protective  device.  Two  versions  of  the 
Schjeldahl  smoke  hoods  were  used  in  the  FAA/CAMI  tests  but  the  subsequent  NPRM  in  1969  was  primarily  based 
upon  results  of  investigations  with  the  earlier  version.  Several  other  research  studies  have  also  evaluated 
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smoke  hood  protective  devices.  In  1967-68  the  Aerospace  Industries  Association  (AIA)  evaluated  a number 
of  prototype  devices,  which  were  subjectively  tested  (488).  In  October,  1969  the  Aeroport  de  Paris  carried 
out  two  tests  by  three  volunteers  of  an  early  Schjeldahl  Type  D (drawstring)  smoke  hood  furnished  by  the 
FAA  [Mouton  and  Armand,  1969  (583)].  Subjective  evaluation  was  also  made  by  consultants  to  the  Air  Trans- 
port Association  of  America  (ATAA)  (560),  and  in  1970  by  three  members  of  the  Space  Science  Board,  National 
Academy  of  Science/National  Research  Council  upon  request  of  the  FAA.  The  background  and  results  of  these 
investigations  are  provided  in  some  detail  in  the  following  subsections. 

In  January,  1969,  a Notice  of  Proposed  Rule  Making  was  published  in  the  Federal  Register  which  would 
amend  Part  121  of  the  Federal  Air  Regulations  to  require  that  protective  smoke  hoods  be  carried  on  all 
civil  air  carriers.  Citing  results  of  earlier  studies,  the  "FAA  concludes  that,  if  protective  smoke  hoods 
were  provided  in  large  transport  airplanes,  the  probability  of  occupant  survival  in  airplane  crashes  would 
be  significantly  increased;  that  the  economic  burden  of  fitting  airplanes  with  such  hoods  is  reasonable  in 
relation  to  expected  benefits;  and  that  prototype  hoods  have  been  tested  and  evaluated  to  a sufficient  ex- 
tent to  justify  a requirement  (with  a reasonable  implementation  period)  at  the  present  time"  [F.R.  34,  p. 
466,  1969  (507)]. 

The  FAA  received  23  comments  as  a result  of  this  NPRM.  Of  the  major  aviation  associations  which 
commented,  the  Airline  Pilots  Association  supported  the  proposal;  however,  the  Air  Transport  Association, 
Aerospace  Industries  Association,  Airline  Stewards  and  Stewardesses  Association  and  the  Airline  Dispatchers 
Association  were  stronqly  opposed.  The  Flight  Safety  Foundation  opposed  the  rule  on  the  basis  of  a medi- 
cal evaluation  submitted  by  consultants  of  the  Air  Transport  Association  of  America,  a supporter  of  the 
FSF.  The  National  Transportation  Safety  Board  concurred  in  the  FAA  intent,  but  expressed  concern  over  a 
possible  increase  in  evacuation  time  and  limitation  of  available  oxygen  with  use.  The  major  comments  in- 
volved questions  of  hood  safety,  practicality,  concern  over  whether  it  would  slow  down  evacuation  time, 
and  whether  the  specifications  listed  were  justifiable.  As  a result  of  analysis  of  the  comments  received 
related  to  this  proposed  rule,  the  FAA  withdrew  Notice  69-2  in  September,  1969,  despite  the  strong  objec- 
tions of  the  FAA  Office  of  Aviation  Medicine.  In  view  of  the  difference  of  opinion  expressed  between  the 
medical  and  regulatory  arms  of  the  Federal  Aviation  Administration  concerning  the  value  of  the  smoke  hood 
concept  in  post-crash  emergency  evacuation,  the  basis  for  rejection  of  the  1969  FAA  proposed  smoke  hood 
requirement  for  civil  air  carrier  aircraft  should  be  reexamined  both  in  relation  to  air  transport  aircraft 
requirements,  and  with  consideration  for  subsequent  advances  in  the  state-of-the-art.  In  this  regard,  the 
results  of  the  reports  and  studies  bearing  upon  the  questions  posed  seem  particularly  pertinent  and  are 
summarized  in  the  following  sections. 


3.2.2  FAA  Civil  Aeromedical  Institute  Tests.  Initial  development  and  testing  of  the  smoke 
hood  were  conducted  at  the  FAA  C i v i 1 Ae romed i cal  I n s t i t ute  ( CAM I ) laboratories  at  Oklahoma  City  under  the 
direction  of  E.B.  McFadden  in  1966,  and  the  following  summarizes  this  work  [McFadden  et  al . , 1967  (538)]. 
Experimental  transparent  hoods  were  fabricated  under  contract  by  the  G.T.  Schjeldahl  Company.  Primary 
design  criteria  involved: 

(1)  Design  and  operation  simplicity. 

(2)  Smoke  inhalation  protection  for  a limited  (2-1/2  - 8 min)  duration. 

(3)  Omnidirectional  visibility  and  donning. 

(4)  Lightweight  and  compact  in  size. 

(5)  Device  should  not  melt  or  burst  into  flame  when  worn  on  the  head  or  face. 


Secondary 

(6) 

(7) 

(8) 
(9) 

(10) 


design  considerations  were  determined  to  be: 

To  prevent  inhalation  of  flames  and  respiratory  damage. 

To  protect  the  face  and  hair  from  direct  contact  with  flames. 

To  provide  protection  from  convective  and  radiant  heat. 

To  extend  passenger  escape  time  by  maintaining  passenger  mobility  and  continuation  of  evacuation. 
Esthetic  considerations  involving  prevention  of  disfiguring  facial  burns. 


These  hoods  were  constructed  of  "Kapton,"  (tradename  of  E.I.  duPont  de  Nemours  Corporation,  Wilming- 
ton, Delaware),  a high-temperature  polyimide  film,  selected  because  of  its  characteristics  of  non-melting 
when  exposed  to  extreme  heat,  non-flammability,  and  transparency . Char  levels  for  Kapton  are  stated  to 
exceed  800°C  (1,472°F).  Kapton  also  exhibits  a high  tensile  strength,  folding  endurance,  low  shrinkage, 
insolubility  in  organic  solvents,  and  inertness  to  fungi.  Conventional  heat-sealing  techniques  could  not 
be  used  in  fabrication  since  polyimide  film  has  no  melting  point.  One  initial  series  was  fabricated  uti- 
lizing high  temperature  adhesives.  A second  series  was  fabricated  with  a transparent  reflective  metalizing 
coating.  Some  21  samples  of  polyimide  film  were  successively  coated  with  varying  thicknesses  of  gold,  sil- 
ver, and  aluminum,  with  and  without  a protective  coating  over  the  metal.  Evaluation  was  made  for  infra- 
red emissivity  and  reflectance,  heat,  and  optical  transmission. 


The  normal  volume  of  the  hood  was  calculated  to  be  about  18.5  liters  (1,129  cu  in)  exclusive  of  the 
volume  occupied  by  the  wearer's  head.  Human  testing  was  conducted  with  subjects  wearing  the  clear,  un- 
coated, amber-colored,  polyimide  hoods  and  the  coated  silver  polyimide  hoods  for  eight  minutes  of  infra- 
red radiation  exposure  with  the  filament  of  the  lamps  located  55.9  cm  (22  in)  from  the  front  surfaces  of 
the  hood.  The  metalized  polyimide  film  was  shown  to  develop  up  to  90%  infra-red  reflectance.  When  the 
clear  hood  was  used,  skin  temperatures  of  46.1-47.2°C  (11 5-1 1 7°F)  approached  the  limits  of  voluntary  heat 
tolerance.  A maximum  skin  temperature  of  37.7°C  (100°F)  resulted  under  the  same  conditions  while  subjects 
wore  the  coated  silver  hood.  When  the  heat  sources  were  moved  to  a point  16.5  cm  (6.5  in)  from  the  front 
surface  of  the  hood  (lamp  lens  within  2. 5-5.0  cm  [1-2  in]  of  contact)  forehead  skin  temperature  averaged 
41.1°C  (106°F).  Some  reduction  in  visibility  with  both  clear  and  metalized  hoods  was  found.  It  was  cau- 
tiously concluded  from  this  investigation  that  the  Schjeldahl  smoke  hood  had  potential  usage  for  short- 
term emergency  protection,  however  additional  tests  and  development  were  required  "prior  to  any  specifica- 
tion for  operational  use  in  aircraft"  [McFadden  et  al . , 1967  (538)]. 

However,  the  initial  tests  reported  in  1967  [McFadden  et  al.  (537,  538)]  as  well  as  the  FAA  Flight 
Standards  full  scale  evacuation  tests  [Federal  Aviation  Administration,  1 968  (506)],  and  studies  carried 
out  by  the  Aerospace  Industries  Association  Crashworthiness  Development  Program  Technical  group  [1968 
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(488)],  had  revealed  specific  design  deficiencies  in  the  original  prototype.  The  primary  deficiencies 
noted  were: 

(1)  Neck  Seal . Passengers  and  crew  evacuating  from  jet  aircraft  could  not  be  relied  upon  to 
consistently  tighten  the  drawstring  neck  seal. 

(2)  Vision.  While  polyimide  surface  aluminization  was  shown  to  provide  excellent  radiant  heat 
reflectance  and  sufficient  transparency  for  adequate  vision  under  normal  illumination  levels, 
it  was  found  that  evacuation  test  subjects  experienced  vision  difficulties  when  exposed  to 
the  .05  foot-candle  emergency  illumination  as  provided  in  jet  transport  aircraft. 

(3)  Useful  air  supply.  Limitations  in  time  duration  of  hood  effectiveness  in  rebreathing  (partially 
due  to  neck  seal). 

In  a subsequent  study  by  the  Civil  Aeromedical  Institute,  FAA  [edited  by  McFadden  and  Smith,  1970 
(539)],  specific  items  were  evaluated  as  suggested  by  the  results  of  the  initial  tests.  This  combined 
multi-disciplinary  physiological,  medical,  and  psychological  investigation  examined  leakage,  toxic  effec- 
tiveness, vision,  acoustic  characteristics , effects  of  safety  briefings,  and  simulated  evacuation  tests 
through  dense  smoke. 

The  current  state-of-the-art  of  the  Schjeldahl  smoke  hood  is  still  represented  in  these  areas  by 
this  1970  evaluation,  which  was  designed  to  investigate:  (1)  the  degree  of  protection  against  incapacita- 

ting agents  provided  by  the  hood;  (2)  the  hood  limitations  in  terms  of  useful  air  supply,  vision,  and  au- 
dition; and  (3)  the  utility  of  the  hood.  The  specific  findings  of  these  studies  are  summarized  as  follows: 

3. 2. 2.1  Leakage  Evaluation.  As  a result  of  the  earlier  findings  concerning  poor  neck  seal 
with  the  drawstring  hood  ("Type  D"),  a new  neck  seal  consisting  of  a septal  (membrane)  of  heat-resistant 
urethane  was  developed  ("Type  S")  which  fits  closely  about  the  neck  upon  donning.  The  objective  was  two- 
fold; to  determine  life-support  capabilities  with  respect  to  both  the  quality  of  the  contained  air  supply 
and  to  the  metabolic  rate  of  the  wearer  [McFadden  et  al . , 1970  (539)]. 

Ten  hoods  of  each  type  were  tested  utilizing  ten  male  and  ten  female  naive  subjects.  Temperature 
exposure  was  limited  to  60°C  (140°F).  Respiratory  rate  was  continuously  monitored  with  an  impedence  pneu- 
mograph which  also  provided  estimates  of  relative  tidal  volume.  Oxygen  consumption,  carbon  dioxide  pro- 
duction, heart  rate  (ECG),  hydrocarbon  concentration,  and  loss  of  air  were  measured. 

The  most  marked  difference  between  the  septal  and  drawstring  hoods  was  the  observation  that  CO2  ac- 
cumulation and  O2  reduction  in  the  septal  type  (S)  tended  to  progress  in  a relatively  uniform  linear  fa- 
shion, while  with  the  drawstring  (D)  hood  this  tendency  was  interrupted  when  the  CO2  concentration  reached 
a level  which  induced  hyperventi 1 ation . This  increase  in  depth  of  breathing  (pumping  action)  character- 
istically resulted  in  a gross  leakage  and  leveling  off  of  CO2  concentrations  with  the  earlier  drawstring 
(D)  hood.  Overall  leakage  of  the  D drawstring  version  was  markedly  greater  than  with  the  S Septal  hood. 
However,  it  was  noted  that  repeated  usage  of  the  septal  seal  (S)  hood  resulted  in  a trend  toward  greater 
leakage  (fatigue  of  the  elastic  polyurethane  seal)  which  could  be  a factor  if  hoods  were  to  be  donned  re- 
peatedly during  drills  or  precautionary  evacuations,  and  it  was  recommended  for  this  reason  that  seals  be 
replaced  after  each  usage. 

These  investigators  point  out  that  the  results  of  these  tests  illustrate  that  no  hood  which  is  de- 
signed to  meet  the  criteria  of  accessibility  and  economy  of  storage  can  be  expected  to  provide  absolute 
protection  and  life  support  for  indefinite  periods.  A CO2  concentration  of  5%  was  reached  in  septal  seal 
(S)  hoods  within  1.4  to  4.0  minutes,  depending  on  the  temperature  and  degree  of  physical  exertion.  A pro- 
jection to  8%,  the  generally  accepted  minimum  allowable  concentration,  is  reached  in  3 minutes  under  exer- 
cise conditions  and  6.4  minutes  under  rest  "cool"  conditions;  in  2.2  minutes  under  exercise  and  4.9  minutes 
under  rest  "heat"  conditions. 

Information  concerning  metabolic  rates  of  semi-hysterical  people  attempting  to  escape  a burning  air- 
craft are  not  known.  However,  these  authors  believe  this  should  not  exceed  the  O2  consumption  of  the  exer- 
cising subjects.  They  conclude  that  the  8%  tolerance  time  of  approximately  120  seconds  obtained  for  this 
group  seems  a conservative  estimate  of  the  time  during  which  the  average  evacuee  could  benefit  from  the 
hood,  and  that  the  newer  septal  seal  (S)  type  hood  provides  excellent  fume  protection. 

Some  cautions  were  also  expressed.  Pentane  gas  was  selected  as  the  single  model  agent  as  a compro- 
mise between  gases  of  higher  and  lower  molecular  weight,  fat  solubility,  and  other  chemical  properties,  as 
well  as  because  of  safety  up  to  the  flammability  limit  of  1.4%  concentration.  But  toxic  gases  with  greater 
diffusion  potentials  than  pentane  may  occur  in  aircraft  fires  and  include  HCN,  CO,  HCL,  and  aldehydes. 
Failure  of  a particular  device  can  occur  even  under  the  best  of  manufacturing  controls,  as  was  pointed  up 
by  an  incident  reported  by  these  investigators.  "An  experienced  investigator,  wearing  approved  (Bureau  of 
Mines)  full-face  regalia  with  air  supply,  became  incapacitated  by  a leakage  of  lacrimator  gas  while  serv- 
ing as  a safety  man  for  another  investigator  who  was  wearing  a Type  S septal  seal  smoke  hood.  The  man 
equipped  with  the  hood  discovered  the  accident  and  led  the  visually  incapacitated  'safety  man'  from  the 
chamber"  [McFadden  et  al.,  1970,  p.  15  (539)].  Another  possible  risk  is  that  an  individual  who  is  abnor- 
mally insensitive  to  CO2  may  suffer  from  insidious  hypoxia  when  the  O2  is  consumed.  Normal  individuals 
would  be  forced  to  remove  the  hood  by  the  sensation  of  suffocation. 

3.2.2. 2 Toxic  Environment  Effectiveness.  The  objective  of  this  study  was  to  determine  the 
effectiveness  of  the  newer  s ept al  seal  ( S ) protect Tve  smoke  hood  in  preventing  inhalation  of  toxic  sub- 
stances similar  to  those  produced  in  the  combustion  of  aircraft  fuel  and  cabin  interior  materials.  Test 
subjects  were  exposed  to  a heavy  black  smoke  environment  consisting  of  significant  quantities  of  carbon 
monoxide  (CO  concentration  from  450  to  950  ppm)  and  soot  particles  resulting  from  combustion  of  JP-4  fuel 
and  water-soluble  oils.  Seven  adult  (4  male,  3 female)  subjects  were  tested  in  an  octagonal  maze  smoke 
chamber  in  a clockwise  direction  while  conducting  a switching  task  until  they  had  been  exposed  to  at  least 
90  seconds  of  test  [McFadden  and  Gibbons,  1970  (536)]. 

This  study  was  based  on  the  well-established  affinity  of  blood  for  carbon  monoxide,  which  is  several 
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hundred  times  greater  for  CO  than  0%.  Since  it  is  more  easily  passed  through  membranes  due  to  its  small 
molecular  size,  it  is  particularly  important  that  the  smoke  hood  prevent  inhalation  of  this  gas.  During 
the  chamber  exposure  subjects  traversed  linear  distances  of  33  to  67  m (108  to  220  ft),  which  were  con- 
sidered to  exceed  those  required  in  the  movement  to  emergency  exits  in  aircraft,  and  were  able  to  perform 
a relatively  large  number  (11  to  25)  discrete  switching  operations  under  these  conditions.  This  study 
confirmed  the  effectiveness  of  the  septal  seal  (S)  smoke  hood  in  a toxic  environment  under  evacuation  con- 
ditions requiring  both  movement  to  exit  areas  and  ability  to  perform  manipulation  operations. 

3. 2. 2. 3 Vision.  Since  the  earlier  FAA  tests  examined  optical  transmissions  of  the  Schjeldahl 
smoke  hood  by  spectrophotometri c measurement  and  found  deficiencies  in  vision  under  emergency  lighting 
(.05  foot-candles)  conditions,  the  purpose  of  this  study  was  to  evaluate  the  optical  transmission  of  the 
hood  by  visual  photometry  and  determine  the  effect  on  visual  acuity  [Lewis,  1970  (528)]. 

Nine  male  and  three  female  subjects  were  tested,  utilizing  both  the  hood  without  aluminization  (from 
Type  S)  and  the  aluminized  with  a clear  band  (from  Type  D).  The  visual  acuity  tests  were  designed  to  rep- 
resent a worst-case  situation.  Thus  subjects  were  adapted  to  an  illumination  in  excess  of  that  provided 
by  normal  aircraft  interior  lighting;  the  illumination  was  therefore  set  at  30-foot-candles  measured  at 
seat  level.  This  exceeds  the  usual  15-  to  25-foot-candles  provided  by  aircraft  reading  lights  and  the  5- 
to  15-foot-candles  general  illumination  at  armrest  height.  Simulated  emergency  illumination  was  obtained 
by  adjusting  the  voltage  of  a tungsten  lamp  to  provide  .05-foot-candle  illumination.  Test  procedure  in- 
volved the  subject  seated  3 m (10  ft)  from  the  test  target  and  adapted  to  normal  illumination  for  1 minute. 
Basal  acuity  was  measured,  after  which  subjects  were  instructed  to  don  the  smoke  hood  after  lights  were 
turned  off  and  read  each  test  card  as  rapidly  as  possible.  Matched  tests  were  conducted  without  the  smoke 
hood,  and  each  subject  made  eight  runs,  four  in  each  condition. 

Results  showed  that  visual  acuity  in  these  tests  was  reduced  under  emergency  illumination  to  0.68 
without  the  smoke  hood,  compared  to  a further  reduction  to  0.55  while  wearing  clear  smoke  hoods  (Type  S). 
With  aluminized  hoods  (Type  D),  visual  acuity  was  reduced  to  a level  below  the  measurement  capacity.  It 
was  reported  that  clear  smoke  hoods  (Type  S)  have  optical  transmissions  of  about  75-80%  (similar  to  trans- 
mission of  optical  glass  sunglasses).  A difference  of  5%  between  the  uncoated  patch  test  samples  and  the 
clear  areas  from  aluminized  samples  was  considered  to  be  due  to  the  coating  used  to  protect  the  aluminized 
surface.  While  visual  capacity  was  reported  to  be  significantly  affected  by  wearing  clear  hoods  under 
emergency  illumination,  a 20  to  30%  increase  in  the  level  of  emergency  illumination  would  compensate  for 
the  transmission  loss  through  the  non-alumini zed  hoods  [Lewis,  1970  (528)]. 

3. 2. 2.4  Acoustic  Attenuation.  The  purpose  of  this  study  was  to  determine  the  extent  to  which 
the  smoke  hood  may  act  as  a barrier  to  the  transmission  of  sound.  This  is  of  especial  importance  in  an 
emergency  evacuation  if  passengers  are  to  hear  crew  instructions. 

Thirty  male  and  female  subjects  were  each  tested  twice,  once  with  and  once  without  wearing  the  hood. 
Each  subject  wore  the  hood  for  two  periods  of  100  seconds  each.  It  was  concluded  that  the  Schjeldahl 
(Type  S)  smoke  hood  does  not  interfere  with  the  transmission  of  sound  waves.  A barely  discriminable  maxi- 
mum threshold  shift  of  3dB  at  5,000  Hz  was  reported  [Tobias,  1970  (568)]. 

3.2.2. 5 Safety  Briefing  Effectiveness.  The  utility  of  the  smoke  hood  during  an  actual  evacu- 

ation primarily  depends  upon  the  passengers'  or  crew's  success  in  using  it,  and  it  was  considered  that  this 
is  probably  a function  of  the  effectiveness  of  the  preflight  safety  briefing.  This  psychological  study  was 
therefore  designed  to  determine  to  what  extent  increasing  the  amount  of  information  presented  during  safe- 
ty briefings  influences  the  degree  of  hood-donning  success  (as  measured  by  both  ease  and  speed  of  donning), 
the  extent  of  hood  inflation,  the  incidence  of  positive  and  negative  feelings  about  hoods,  and  the  willing- 
ness to  use  them.  In  addition  it  was  considered  important  to  ascertain:  (1)  how  much  of  the  information 

presented  during  briefings  is  retained,  as  a function  of  the  amount  presented;  (2)  the  importance  of  the 
use  of  demonstrations,  (3)  whether  hood-donning  ability  is  affected  by  the  passenger's  sex;  and  (4)  whether 
practice  will  result  in  a significant  performance  improvement.  This  study  was  conducted  by  Smith  [1970 
(564)]. 

Naive  subjects  consisted  of  35  females  and  68  males  between  the  ages  of  17  and  31;  22  observers  were 
pretrained  for  behavioral  observations.  The  study  was  conducted  in  an  aircraft  cabin  with  seating  modi- 
fied to  allow  observers  to  directly  observe  subjects.  A pocket  containing  a compactly  folded  Type  S smoke 
hood  (15.2  x 17.8  x 3.8  cm  [6  x 7 x 1-1/2  in])  was  firmly  taped  on  the  seat  back  in  front  of  each  subject, 
and  positioned  so  that  the  upper  portion  would  tear  off  when  a subject  pulled  on  either  of  two  red  tabs 
located  at  the  upper  corners  of  the  pocket.  A tape  recording  presenting  six  variations  in  briefings  pro- 
vided a greeting,  statement  of  emergency  exit  locations,  description  of  the  use  of  oxygen,  and  statement 
of  the  location  and  purpose  of  the  safety  hood.  Each  subsequent  briefing  (with  a different  group  of  sub- 
jects) increased  the  amount  of  information  given  about  the  smoke  hood,  although  the  stewardess  gave  the 
same  demonstration  during  all  briefings.  At  the  conclusion  of  each  briefing  the  subjects  were  told  that 
on  a signal  they  were  to  don  the  smoke  hoods  located  on  the  backs  of  the  seats  in  front  of  them  as  quickly 
as  possible. 

Results  of  the  hood-donning  efficiency  indicated  that  subjects  (95.2%)  felt  that  the  instructions 
were  clear.  Observers  noted,  however,  that  90.3%  of  the  subjects  encountered  some  sort  of  a problem  in 
donning  the  hoods,  although  all  were  reported  to  have  gotten  the  hood  on  both  quickly  and  satisfactorily. 
Finding  and  spreading  the  neck  seal  and  completely  inflating  the  hood  so  that  it  would  contain  a maximum 
amount  of  air  seemed  to  present  the  biggest  difficulties.  It  was  judged  that  giving  instructions  about 
getting  the  hood  over  glasses  could  be  helpful. 

Some  73.4%  demonstrated  satisfactory  retention  of  safety  information,  with  no  difference  in  retention 
rates  between  demonstrated  and  non-demonstrated  items.  However,  it  was  also  reported  that  subjects  in  5 
of  the  6 groups  did  better  on  non-demonstrated  than  demonstrated  items.  Subjects  did  poorest  in  retention 
of  information  related  to  exits,  and  on  how  long  to  wear  the  hood.  Previous  hood-donning  experience  was 
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found  to  significantly  reduce  the  time  of  donning  as  well  as  problems  encountered.  It  was  suggested  that 
passengers  seated  next  to  windows  may  have  more  difficulty  in  hood  donning  than  aisle  passengers  due  to 
space  limitations.  Nothing  was  noted  about  the  middle  passenger  in  a triple  seat. 

It  was  concluded  by  Smith  that  increasing  the  amount  of  information  presented  during  briefings  about 
the  use  of  protective  smoke  hoods  had  little  effect  on  donning  time  but  resulted  in  fewer  problems  in  don- 
ning over  glasses,  better  inflated  hoods,  and  more  positive  feelings  about  the  hood  use.  All  subjects 
stated  they  would  use  the  hood  in  an  emergency  although  some  expressed  reservations  about  a shortage  of 
air  in  the  hoods. 

Recommendations  resulting  from  this  investigation  were  reported  as  follows  [Smith,  1 g70  (564)]: 

(1)  General  safety  briefings  should  probably  contain  more  information  about  the  use 
of  safety  devices. 

(2)  The  portion  of  the  briefings  dealing  with  safety  hoods  should  include  mention 
of  the  adequacy  of  air  supply. 

(3)  The  opening  in  the  S type  hood's  septal  seal  neck  should  be  modified  to  make 
it  easier  to  find  (perhaps  by  outlining  in  a contrasting  color). 

(4)  Consideration  should  be  given  to  using  a larger,  less  compact  hood  package, 
with  possible  enclosure  of  self-distending  devices. 

3. 2. 2. 6 Dense  Smoke  Evacuation.  This  final  investigation  in  the  1970  FAA  study  of  the  smoke 
hood  was  designed  to  determi ne  the  "react i ons  of  a naive  group  of  subjects  to  smoke  hood  use  during  simu- 
lated evacuation  in  the  presence  of  heavy  smoke.  This  work  was  conducted  by  McFadden  [1970  (534)]. 

The  test  evacuations  were  conducted  in  a Lockheed  L-749  Constellation  cabin,  with  motion  picture 
analysis  (smoke  completely  obscured  visibility),  sound  recordings  by  means  of  a tape  recorder,  and  with 
one  slide  inflated  and  in  place  at  the  exit  door  (at  left  rear  cabin),  partly  open  prior  to  tests.  The 
smoke  hood  packet  was  inserted  in  the  seat  back  pocket.  The  Type  D drawstring  hood  was  used  in  these 
tests.  One  group  of  64  subjects  evacuated  without  smoke  and  without  using  the  hoods,  then  in  a second 
test  used  hoods  in  dense  smoke  to  evacuate  upon  activation  of  an  audio  alarm.  A second  group  of  64  sub- 
jects made  their  initial  evacuation  under  smoke  conditions  while  wearing  smoke  hoods,  and  a second  test 
without  the  presence  of  smoke  and  without  wearing  hoods.  Smoke  was  produced  by  means  of  a theatrical  smoke 
generator  to  an  extent  that  visual  cues  were  virtually  eliminated.  This  series  of  tests  was  intended  to 
measure  the  flow  of  a maximum  number  of  passengers  through  only  one  exit. 

It  was  found  that  the  presence  of  smoke  was  the  primary  variable  influencing  speed  of  evacuation, 
although  the  use  of  hoods  alone  was  reported  to  have  had  little  significant  effect  on  evacuation  rate. 
Subjective  questionnaire  results  indicated  the  experience  gained  in  evacuating  without  smoke  was  beneficial 
when  subjects  subsequently  evacuated  under  smoke  conditions. 

3.2.2. 7 Conclusions  of  FAA/CAMI  1970  Tests.  The  six  studies  summarized  in  the  foregoing  in- 
dicated that  the  currently  available  smoke  hood  devices  tested  did  protect  the  individual  from  the  res- 
piratory effects  of  smoke  and  provided  him  with  an  air  sample  which  was  relatively  uncontaminated  and  ade- 
quate for  evacuation  from  current  civil  jet  transports.  However,  there  still  remained  some  limitations, 
primarily  that  the  hood  did  not  increase  visibility  in  smoke  other  than  preventing  eye  irritation,  and 
the  air  supply  was  limited.  The  septal  seal  neck  of  the  new  Schjeldahl  Type  S hood  had  been  shown  to  be 

a distinct  improvement  over  the  older  drawstring  D type  in  preventing  the  penetration  of  noxious  substances 
into  the  hood  air  sample.  Several  problems  pointed  out  relating  to  the  passenger  locating  the  seal  for 
donning,  and  the  decrement  of  the  seal  through  repeated  usage,  were  felt  to  be  solvable.  Results  from 
these  briefing  tests  indicated  that  even  with  a minimal  briefing  most  passengers  should  be  able  to  use  the 
hood  adequately.  The  major  improvement,  which  was  explored  in  subsequent  experimental  developments,  evalu- 
ated the  incorporation  of  a self-contained  oxygen  supply  and  carbon  dioxide  removal  agent.  In  view  of  the 
foregoing  studies  the  FAA  medical  investigators  felt  that  development  of  a safe  "get-me-out"  smoke  protec- 
tive device  had  progressed  to  the  point  where  its  use  in  civil  air  carriers  should  be  mandatory.  Figs. 

24  and  25  illustrate  the  use  of  this  particular  device  in  the  Chrysler  Corporation  G-2  Gulfstream. 

3.2.3  1967-68  AIA  Smoke  Hood  Evaluation.  As  part  of  the  Crashworthiness  Development  Program  of  the 

Aerospace  Industries  Association  of  America^  evaluation  and  testing  of  aircraft  crash-egress  smoke  masks 

were  conducted  in  ig67-68  and  a limited  distribution  of  results  prepared  in  July,  1968  [AIA,  1968  (488)]. 

A Boeing-McDonnel 1 Douglas  team  evaluated  prototype  "masks"  at  the  McDonnell  Douglas  laboratories  at  Long 
Beach  and  the  Boeing  Company  laboratories  at  Renton,  Washington.  These  are  the  only  comparative  tests 

known  for  a number  of  prototype  devices.  In  September,  1967,  28  companies  were  sent  an  invitation  to  par- 

ticipate which  described  suggested  requirements  for  smoke  and  fume  protective  devices  that  could  be  used 
for  escape  from  an  aircraft  fire.  As  a result,  8 companies  submitted  10  prototype  devices.  These  consis- 
ted of  the  Schjeldahl  hood  (drawstring  version,  "D"),  Boeing  Mask,  John  Hand  Hood,  Racine  Glove  Company 
Hood,  Sierra  Engineering  Corporation  Hood,  two  Life  Support  Systems  Hoods,  Scott-O-Vista  Mask,  and  two 
Mine  Safety  Appliance  Company  devices,  as  illustrated  and  described  in  Figs.  26-32.  Tests  included  sub- 
jective smoke  tests,  in  which  a volunteer  subject  entered  a 9.6  cu  m (340  cu  ft)  smoke  chamber  wearing  a 
previously  donned  and  adjusted  hood,  and  remained  until  breathing  became  intolerable  for  that  individual. 
White  irritant  smoke  was  initiated  from  a smoke  bomb  device.  These  tests  were  reported  as  indicating  that 
small  amounts  of  leakage  had  a significant  effect  on  the  wearer,  making  the  subject  want  to  remove  the 
mask.  One  test  was  conducted  in  a noxious  environment  produced  with  a .09  m sq  (1  ft  sq)  pan  burning  in 
a 4.5  m (15  ft)  mock-up  utilizing  a Boeing  Mask  with  a modified  mouthpiece  and  nose  seal.  (Rebreathing 
of  less  than  2 liters  (122  cu  in)  of  previously  exhaled  air  used  to  inflate  the  device  would  appear  to  be 
an  inadequate  rebreathing  volume.) 

Three  exposures  of  increasing  but  unspecified  duration  were  reported  as  successfully  tolerated,  but 
in  a fourth  exposure  planned  for  150  sec,  the  subject  lost  consciousness  at  130-140  sec.  It  was  concluded 
that  this  resulted  from  a lack  of  oxygen.  No  information  is  available  as  to  the  number  of  subjects,  num- 
ber of  tests,  or  number  of  each  hood  type  tested.  Apparently  no  objective  testing  was  conducted. 
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Fig.  24.  Demonstration  of  passenger  donning  Schjeldahl  "S"  model  "safety"  hood  in  Chrylser  Corporation 
Gulfstream.  This  smoke  hood  is  presently  in  use  in  many  corporate,  FAA,  and  other  aircraft  and  has  been 
recommended  in  several  studies  for  use  in  USAF  air  transport  aircraft  (Photo  courtesy  Chrysler  Corporation). 


Fig.  25.  Once  smoke  hood  is  donned  it  may  protect  the  passenger  against  toxic  fumes  and  smoke  for  4 to  6 
minutes,  and  protect  the  head  and  face  against  the  effects  of  flames  exceeding  800°C  (1,472°F),  providing 
additional  emergency  egress  capability  (Photo  courtesy  Chrysler  Corporation) . 
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It  was  reported  that  eight  evacuation  tests  were  conducted  in  an  abbreviated  Boeing  727-200  mock- 
up,  using  only  Schjeldahl  (Type  D),  John  Hand,  and  Boeing  masks  due  to  limited  availability  of  other  de- 
vices. Illumination  conditions  and  instructions  were  varied  during  the  smoke  tests.  Information  was  re- 
portedly obtained  by  use  of  motion  picture  photography,  questionnaires,  and  voice  recorders.  Results  in- 
dicated that  donning  time  ranged  from  8 to  14  seconds.  Hoods  were  frequently  not  zipped  up  or  properly 
tightened  and  the  Boeing  Mask  mouthpiece  often  was  not  gripped  in  the  mouth.  Subjects  were  reported  to 
have  lifted  the  devices  above  their  eyes  to  improve  visibility.  Devices  used  in  light  smoke  and  with  0.1- 
foot-candle  averaqe  cabin  illumination  resulted  in  a 30%  decrease  in  evacuation  rate  (but  this  report  does 
not  indicate  over  what).  Devices  used  in  a dark  cabin  with  smoke  were  reported  to  be  33  to  52%  slower 
when  compared  to  evacuation  in  dark  conditions  with  no  masks  or  hoods.  Device  usage  increased  when  clear- 
er instructions  were  given  in  briefing.  This  study  concluded  that  use  of  the  devices  tested  was  not  satis- 
factory; that  visibility  was  decreased  and  evacuation  slowed  about  30%.  Although  these  conclusions  are 
not  objectively  documented  by  in-depth  tests  of  the  devices  examined,  they  represent  a major  attempt  to 
survey  the  state-of-the-art  at  that  time. 

3.2.4  1969  French  Tests  of  Schjeldahl  (Type  D)  Smoke  Hood.  In  October,  1969,  the  Aeroport  de  Paris 
carried  out  two- tests  by  three  volunteers  of  the  early  Type  D (drawstring)  smoke  hood  loaned  by  the  FAA 
(Mouton  and  Armand,  1969,  unpublished).  Volunteers  were  all  pilots  and  tests  were  carried  out  in  a smoke- 
filled  cabin  of  an  obsolete  Starliner  transport  at  Orly.  Although  these  tests  were  limited  and  of  a sub- 
jective nature,  the  conclusions  and  comments  resulting  should  be  noted. 

They  observed  that  the  smoke  hood  was  easily  donned,  there  was  no  smoke  penetration,  there  was  effec- 
tive protection  of  the  face  from  flame  (but  the  plastic  neck  collar  burned  when  placed  by  itself  directly 
in  flame),  hearing  appeared  normal,  visibility  was  360°,  and  the  hood  design  allowed  it  to  be  donned  in 
anv  position.  However,  they  also  noted  a problem  with  moisture  condensation  from  respiration  within  ap- 
proximately one  minute  after  donning  which  lowered  visibility.  In  this  regard,  this  observation  was  made 
at  close  to  normal  temperature  and  it  was  postulated  that  such  moisture  might  not  occur  in  the  heat  of  an 
actual  fire.  Another  critical  comment  involved  a lack  of  air  experienced  at  about  75  seconds,  and  a maxi- 
mum usage  limit  of  2 to  2.5  minutes.  The  lack  of  visibility  in  a smoke-filled  cabin  was  also  noted,  as 
well  as  the  fact  that  one  of  the  three  masks  tested  tore  “rather  easily,"  although  the  report  did  not  state 
where  the  tear  occurred  or  under  what  conditions. 

Thev  proposed  (through  the  SNPL  Technical  Committee)  the  combined  use  of  the  oxygen  mask  and  smoke 
hood  to  increase  the  breathing  time,  although  noting  the  fire  danger  from  use  of  0?.  This  report  concludes 
that  the  smoke  hood  represents  considerable  progress  in  fire  protection  and  contributes  to  preventing  pas- 
senqer  panic.  They  sugqested  improvements  consisting  of:  (1)  reinforcing  plastic  collar;  (2)  using  im- 

proved heat-resistant  plastic  in  collar;  (3)  extending  hood  below  collar  to  protect  it;  (4)  providing 
chest  shieldinq;  and  (5)  consider  combining  with  an  oxygen  mask  to  provide  prolonged  survival  time. 

3.2.5  1969  ATAA  “Riley  Report."  Appended  to  the  Air  Transport  Assocation  of  America  comments  on 
the  protective  smoke  hoods  for  emergency  use  by  passengers  and  crew  members  (Docket  No.  9344,  Notice  69-2) 
were  opinions  expressed  by  Dr.  Richard  L.  Riley,  Professor  and  Chairman,  Department  of  Environmental  Medi- 
cine, The  Johns  Hopkins  School  of  Hygiene  and  Public  Health,  and  Dr.  Solbert  Permutt,  Professor  of  Environ- 
mental Medicine  in  the  same  department,  consultants  to  the  ATAA.  They  were  of  the  opinion  that  the  early 
CAMI  study  failed  to  give  adequate  consideration  to  the  hazard  of  hypoxia  created  by  the  smoke  hood  it- 
self, and  therefore  that  the  smoke  hood  "does  create  a significant  hazard  in  itself."  They  were  especial- 
ly concerned  with  the  possibility  of  fatal  accidents  occurring  as  a result  of  prolonged  breath-holding, 
and  cited  an  investigation  by  Craig  [1961  (499)]  of  eight  near-drownings  and  five  drownings  in  which  it 
was  believed  that  hyperventilation  before  breath-holdinq  and  exercise  may  delay  the  onset  of  the  urge  to 
breathe  ("white-drowning").  In  this  case,  before  the  partial  pressure  of  CO2  increases  significantly,  the 
Og  may  decrease  to  a degree  incompatible  with  high-level  cerebral  function.  In  other  words,  when  the  in- 
dividual hyperventilates  he  drives  out  the  CO2  and  soon  uses  the  02  faster  than  he  builds  up  CO2.  They 
also  disputed  that  everyone  will  remove  the  smoke  hood  once  the  CO2  reaches  a certain  level.  The  arguments 
presented  in  this  report  were  based  upon  critical  review  of  the  early  CAMI  report  [McFadden  et  al . , 1967 
(538)],  aircraft  evacuation  movies,  evacuation  evaluation  of  the  Aerospace  Industries  Association  [A I A 
Report  CDP-2,  1968  (488)],  and  inspection  and  donning  of  Type  D and  Type  S hoods. 

Their  views  were  subsequently  concurred  in  by  Dr.  Fenn  of  the  University  of  Rochester,  Flight  Safety 
Foundation  consultant,  who  read  their  report  and  concluded  that  there  is  a danger  in  the  use  of  a gas- 
proof baq  of  that  type  because  it  can  lead  to  suffocation  and  unconsciousness  when  the  oxygen  is  suffi- 
cientl y depl eted. 

At  the  time  of  these  opinions,  the  more  extensive  FAA/CAMI  smoke  hood  research  reported  in  1970  (539), 
utilizing  the  more  advanced  Schjeldahl  septal  seal,  was  not  available. 

3.2.6  1970  NAS/NRC  Space  Science  Board  Report.  In  1970,  at  the  request  of  the  Office  of  Aviation 
Medicine,  FAA,  to  the  National  Academy  of  Science/National  Research  Council  (NAS/NRC),  critical  evalua- 
tions of  the  smoke  hood  device,  apparently  based  primarily  on  the  most  recent  FAA  studies  [McFadden  et  al . , 
1970  (539)],  were  conducted  by  three  members  of  the  Space  Science  Board.  In  the  comments  received,  sev- 
eral potential  hazards  were  pointed  out.  The  narcotic  effect  of  higher  CO2  concentrations  have  led  to 
sudden  unconsciousness,  without  warning  (at  9.2%  level  CO2)  [White  et  al . , 1952  (571)],  and  when  asphyxia- 
tion to  the  point  of  respiratory  failure  is  brought  about  by  inhaling  pure  CO2,  resuscitation  has  not  been 
successful.  Hypoxia  was  also  felt  to  be  a serious  hazard  due  to  the  limited  supply  of  oxygen.  Another 
point  brouqht  up  concerned  the  legal  problem  which  an  airline  might  find  itself  in,  in  the  case  of  a le- 
thal ly  injured  individual  found  wearing  a smoke  hood  following  a fire.  Cause  of  death  may  be  difficult  to 
determine  in  this  instance.  Hood  material  deterioration  characteristics  were  questioned,  as  well  as  re- 
usability. The  tolerance  of  hood-wearing  on  people  with  cardiac  disease  or  pulmonary  dysfunction  is  un- 
known, and  the  wearing  time  in  egress  at  higher  elevations  was  questioned.  What  are  the  problems  in  fit- 
ting infants,  children,  and  people  with  abnormal  neck  size  into  the  D or  S type  hood? 
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While  one  reviewer,  experienced  in  CO?  toxicity,  stated  that  he  doubted  he  would  wear  the  smoke  hood 
as  an  alternative  to  evacuating  a smoke-filled  cabin,  other  evaluators,  while  cautious,  appeared  to  indi- 
cate in  general  that  progress  had  been  made.  The  necessity  for  ease  in  donning,  a minimum  amount  of  in- 
struction, good  vision,  and  a self-contained  oxygen  supply  and  CO2  removal  agent  was  emphasized.  This  re- 
port undoubtedly  represents  the  most  thorough  medical  critique  of  the  smoke  hood  development  of  the  0 and 
S types.  The  more  advanced  self-contained  air  supply  type  of  hood  presently  under  development  appears  to 
meet  the  most  serious  criticisms;  however,  other  factors  pointed  out  such  as  deterioration  characteristics, 
leqal  problems,  effect  upon  cardiac  or  pulmonary  patients,  and  special  problems  related  to  infants,  ap- 
parently remain  unknown. 


3.2.7  Description  of  State-of-the-Art  Devices.  The  following  figures  provide  basic  illustration 
and  data  on  the  16  smoke  hood  systems  evaluated  in  this  study.  Most  are  experimental  or  prototypes,  but 
several  are  commercially  available. 


Fig.  26.  Boeing  Mask 

Physical  Description.  2 liter  (.07  cu  ft)  polyimide  (Kapton)  re- 
breather bag  mouthpiece  mounted  on  polyurethane  nose-blocking  pad 
accordion-folded  polyimide  heat  shield.  Weight  184  grams  (6.5  oz). 
Designed  to  install  on  seat  back  with  only  handle  showing. 

How  Used.  Grasp  handle,  blow  up  rebreather  bag,  hold  mouthpiece 
with  teeth.  Pull  thermal  shield  over  head,  rebreathe  air  in  bag. 

Availability.  Experimental.  Prototype  used  in  1967  AIA  tests. 
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Fig.  27.  John  Hand  Hood 

Physical  Description.  Vinyl-coated  fiberglass  hood,  clear  fluoro- 
carbon (Aklar)  film  view  window,  open-cell  foam  neck  seal,  with 
zipper  closure.  Weight  170  grams  (6  oz). 

How  Used.  Unfold  hood  and  don  over  head.  Position  viewing  window. 
Pull  zipper  down  to  join  neck  seal. 

Avail abi 1 ity.  Experimental.  Prototypes  used  in  1967  AIA  tests. 


Fig.  28.  Racine  Glove  Company  Hood 

Physical  Description.  Aluminized  rayon  hood,  polyimide  (Kapton) 
■film  view  window.  Coil -spring  holddown  in  hood,  lower  rim  stain- 
less steel,  vent  screen  on  hood  back.  Velcro  tab  ends  on  straps 
hold  hood  down  on  body.  Weight  340  grams  (12  oz). 

How  Used.  Remove  from  container.  Automatically  unfolds  by  coil 
spring  action.  Place  hood  over  head  and  position  view  window. 
Place  hold  straps  under  arms  and  fasten  about  chest  with  Velcro 
tape. 

Avail abi 1 ity.  Experimental.  Prototypes  used  in  1967  AIA  tests. 
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Fig.  29.  Sierra  Engineering  Corporation  Hood 

Physical  Description.  Accordion  polyimide  (Kapton)  cylinder  with 
flat  top.  Supplemental  air  is  vented  into  top,  which  inflates  a 
toroidal  neck  seal  (air  supply,  not  yet  designed).  Weight  235 
grams  (8.3  oz)  (without  air  supply). 

How  Used.  Place  hood  over  head.  Activate  supplemental  air  supply. 
Avai 1 abi 1 i ty.  Experimental.  Prototypes  used  in  1967  AIA  tests. 


Fig.  30.  Life  Support  Systems  Hoods. 

A.  Elastic  Neck  Seal  Type 

Physical  Description.  1-mil  polyimide 
TTlnf (kapton)  hood,  elastic  neck  seal. 
Weight  19.8  grams  (0.7  oz). 

How  Used.  Unfold  and  pull  over  head. 
Availability.  Experimental.  Prototypes 


B.  Lanyard  Neck  Seal  Type 

Physical  Description.  1-mil  polyimide 
film  (Kapton)  hood,  sliding  ball  and 
lanyard  seal.  Weight  36.8  grams  (1.3  oz). 

How  Used . Unfold  and  pull  over  head, 
push  el astic  ball  up  lanyard  to  form 
tight  neck  seal . 

used  in  1967  AIA  tests. 
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Fig.  31.  Scott-O-Vi sta  Mask 

Physical  Description.  Polycarbonate  plastic  (Lexan)  "bubble"  face-piece, 
set  irT  high-temperature- resistant  rubber  frame.  Sealed  filter  canister 
for  removal  of  smoke,  fumes,  CO,  from  inhaled  air.  Mask  held  to  face  by 
elasticized  head-band,  voice  amplification  by  a vibrating  resonator. 
Weight  260  grams  (9.2  oz). 

How  Used.  Pull  seal  from  canister  air  inlet.  Place  mask  over  face  and 
pull  band  over  head. 

Manufacturer.  Scott  Aviation,  225  Erie  St.,  Lancaster,  N.Y.,  14086. 

Avai labil i ty.  Production  item. 


Fig.  32.  Mine  Safety  Appliance  Company  Devices 


A.  Canister  Device  (88480) 

Ultra  Filter  Respirator  (457117) 

Physical  Description.  Protects  against 
Bust,  gases,  smoke  particles  .9  microns 
or  larger,  vapors,  but  no  CO  removal. 
Weight  680  grams  (24  oz). 

How  Used.  Remove  or  break  seal.  Place 
mouthpiece  firmly  in  mouth.  Put  clip 
on  nose. 


B.  W-65  Self-Rescuer  (455299) 

Physical  Description.  Removes  large 
smoke  particles  and  C02.  Designed 
primarily  for  escape  from  CO?  environ- 
ment. Can  only  use  once  and  must 
replace  entire  unit.  Weight  510  grams 
(18  oz) . 

How  Used.  Remove  or  break  seal.  Place 
mouthpiece  firmly  in  mouth.  Put  clip 
on  nose. 


Manufacturer.  Mine  Safety  Appliances  Co.,  400  Penn  Center  Blvd.,  Pittsburqh, 
Pa.,  15235. 

Availability.  Production  items.  Cost:  A.  Filter  ($5.80)  and  canister  ($64.85) 

67  $47.50. 
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Fig.  33.  North  American  Rockwell  Hood 

Physical  Description.  This  smoke/flame  hood  concept  would  include  three 
components:  transparent  hood,  neck  closure  system,  and  compressed  air 

supply.  A short-range  radio  receiver  could  be  incorporated  for  instructions 
from  the  crew. 

How  Used.  Would  be  designed  to  fold  into  packet  on  seat  back.  Pull  hood 
out  of  packet,  don  over  head,  and  pull  down  into  position. 

Availability.  Experimental.  Prototype  used  in  1967  AIA  tests. 


Fig.  34.  North  American  Rockwell  Smoke  Mask 

Physical  Description.  This  concept  consists  of  a moist  cloth  of  several 
Tayers  and  large  enough  to  cover  the  mouth  and  nose.  An  elastic  band 
fits  around  the  head. 

How  Used.  Sealed  in  a plastic  bag,  the  moist  cloth  would  be  held  to 
the  mouth  and  nose  by  hand,  and  by  an  elastic  band  over  the  head. 

Availability.  Experimental.  Prototype  used  in  1967  AIA  tests. 
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Fig.  35.  Sheldahl  Hood  - "D"  (drawstring)  Model 

Physical  Description.  Metal ized  polyimide  (Kapton)  hood.  Volume  26.5 
T iters  (0.9  cu  ft) . Cylindrical  with  domed  top.  Elastic  fiberglass 
neck  drawstring.  5 cm  (2  in)  vision  band. 

How  Used.  Unfold  from  container,  take  breath  of  air,  slip  over  head, 
draw  neckband  snug. 

Manufacturer.  G.T.  Sheldahl  Company,  Advanced  Products  Division, 
Northfield,  Minnesota,  65057. 

Avail abil ity.  Prototype  experimental  device.  Superceded  by  modified 
production  1rS"  model. 


Fig.  36.  Sheldahl  Hood  - US"  (Septal  Neck  Seal)  Model 

Background.  The  Schjeldahl  (or  Sheldahl)  smoke  hood  is  the  most  prominent  of  the  protective  devices 
developed  to  offer  respiratory  protection.  Although  patents  (Nos.  3,562,813  and  3,521,629)  are  held 
by  the  G.T.  Sheldahl  Co.,  Northfield,  Minn.,  55057  [Reynolds,  1970  (557,558);  Origer,  1971  (548)], 
initial  research  and  development  were  as  a result  of  cooperative  effort  with  E.B.  McFadden,  Chief  of 
the  Survival  Equipment  Research  Protection  and  Survival  Laboratories,  Civil  Aeromedical  Institute, 
FAA,  in  studies  reported  1965-1970.  This  has  had  the  most  extensive  testing  and  development  of  any 
smoke  hood  device.  About  600  have  been  sold  for  use  to  date. 

Physical  Description.  Cylindrical  with  domed  top.  Volume  26.5  liters  (0.9  cu  ft).  Annular  neck 
r i n g o f e 1 a s tome r i c film.  Clear  hood,  except  for  metal ized  polyimide  domed  top.  Rebreathing  device 
providing  4-6  minutes  air,  protection  exceeding  800°C  (1,472°F)  temperature. 

How  Used.  Unfold  from  container,  take  breath  of  air,  slip  over  head. 

Manufacturer.  G.T.  Sheldahl  Company,  Advanced  Products  Division,  Northfield,  Minn.,  55057. 

Availability.  Production  item  since  1969.  Currently  available  from  the  manufacturer  at  $49.95  each 
(Feb..  1976),  or  less  for  volume  orders. 
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Fig.  37.  Experimental  FAA/Sheldahl  Hood  - Self-Contained  Air  Supply 

Physical  Description.  Clear  cylindrical  hood  with  metalized  polyimide 
domed  top  (2  mil  Kapton).  Annular  neck  ring  of  elastomeric  film.  V- 
shaped  compressed  air  cylinder  with  rubber  tube  into  hood;  lanyard 
mechanical  initiation.  Compressed  air  unit  snaps  to  hood,  stabilized 
by  two  shoulder  tabs.  Air  supply  duration  can  be  varied,  4-15  min. 

How  Used.  Draw  over  head,  pull  lanyard. 

Manufacturer.  G.T.  Sheldahl  Company,  Advanced  Products  Division, 
Northf i el 3T"Mi nneso ta , 55057. 

Availability.  Prototype  experimental  device  developed  for  FAA/CAMI 
testing^ 


Fig.  38.  Westinghouse/Sheldahl  PBA  Hood 

Physical  Description.  Mylar  plastic  hood  with  rubber  neck  seal  and  celluloid  non- 
fogging lense  eyepiece.  20.3  x 19  x 7.6  cm  (8  x 7.5  x 3 in)  carrying  case  with 
chlorate  candle  mouthpiece  with  dual  scuba  type  air  hose  polycarbonate  heat  shroud. 

How  Used.  Place  hood  and  heat  shield  over  head.  Bite  mouthpiece,  adjust  carrying 
case- with  strap.  Don  helmet  (designed  for  mine  rescue). 

Manufacturer.  G.T.  Sheldahl  Company,  Advanced  Products  Division,  Northfield, 
Minnesota,  55057 . 

Availability.  Experimental.  Approximately  10  uni tsdesigned  and  fabricated  under 
U.S.  Bureau  of  Mines  contract  to  Westinghouse  Ocean  Research,  Annapolis,  Maryland, 
1971. 
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Fig.  39.  Lear-Siegler  Air  Capsule 

Physical  Description.  5-minute  duration.  Breathing  air  (21%  oxygen, 

74  nitrogen,  5%  helium)  is  stored  at  351.8  kg/sq  cm  (5,000  psi)  in  a 
corrosion-resistant  stainless  steel  tubing  coiled  into  a compact 
reservoir.  Transparent  hood  with  drawstring.  Carried  in  either  bi- 
nocular-size case  or  soft  sock.  Shelf-life  3 years  (Model  5000). 

Manufacture  Lear  Siegler,  Inc.,  Electronic  Instrumentation  Division, 
7l 4 North  l i jokhurst  Street,  Anaheim,  California,  92803. 

Avail abi 1 i ty.  Production  item.  Cost:  about  $122.00. 


1 . Open  hard  case 
or  soft  pack. 


2.  Pull  out  Air  Capsule. 

(a)  hard  carrying  case:pull 
out  both  hood  and  attached 
air  reservoir,  (b)  soft  pack: 
pull  out  hood  only  (a  clear 
air  hose  supplies  you  with 
fresh  air  from  the  reservoir. 


4.  Pull  start  ring.  It's 
located  at  the  end  of  the 
air  reservoir.  A slight 
tug  will  start  the  air 
flow. 


5.  Slip  hood  over  your  head. 

The  elastic  hood  opening 
stretches  to  28  in.  It  easily 
accommodates  glasses  and  beards. 
In  donning  an  Air  Capsule  with 
air  reservoir  attached  (hard 
case  only),  start  by  pulling 
the  hood  over  the  back  of  your 
head.  With  the  hood  fully  in 
place,  the  air  reservoir  will 
rest  at  the  back  of  yoir  neck. 


6.  Pull  drawstring  tight  and 
adjust  elastic  neck  band. 
This  elastic  band  should 
touch  your  skin  all  around 
your  neck  to  form  a com- 
fortable seal.  Now  breathe 
easy.  You  can  breathe  and 
speak  normally. 


Fig.  40. 


Instructions  for  use  of  the  Lear-Siegler  Air  Capsule. 


HOOD  ERECTION 


FIRE  RESISTANT 


Fig.  41.  Scott  Aviation  Emergency  Smoke  Hood  and  Breathing  Device 

Physical  Description.  This  system  consists  of  four  major  components:  an 
oxygen  supply  source,  a chemical  carbon  dioxide  and  water  vapor  "scrubber," 
a loose  fitting  hood,  and  a venturi  pump,  supplying  4 liters  (244  cu  in) 
per  minute  0£.  15-minute  recirculation  system.  Solid-state  oxygen 
generator  with  ten-year  shelf  life. 

How  Used.  Remove  from  case,  activate  oxygen  supply  (which  erects  the  hood 
By  pressuring  inflater  tubes),  pull  unit  over  head. 

Manufacturer.  Scott  Aviation,  225  Erie  St.,  Lancaster,  New  York,  14086. 

Availability.  In  final  stages  of  development  (Dec.,  1975).  Not  yet  in 
production.  No  test  results  or  details  of  specifications  released. 
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Fig.  42.  Exp  rimental  FAA/Schjeldahl  protective  hood  of  2 mil  Kapton  which 
can  provide  4 :o  8 minutes  of  breathing  time  using  a self-contained  supply 
of  compressed  air. 


The  logical  follow-up  development  will  involve  overcoming  these  disadvantages  while  retaining  the  ad- 
vantages of  a longer  duration  air  supply.  This  means  that  instead  of  manual  operation  the  device  should 

become  passive,  with  automatic  actuation  of  the  air  supply  when  the  device  is  donned.  Experimental  de- 

velopment of  a smoke  hood  with  self-contained  automatic  air  supply  is  being  considered  by  the  Civil  Aero- 
medical  Institute  of  the  FAA  at  Oklahoma  City.  However,  to  date  this  is  still  in  a concept  stage. 

Adaptation  of  the  emergency  oxygen  mask  for  inflight  fires  and  smoke  emergencies  has  generally  not 
been  successful  because  the  dilution  value  allows  in  outside  air  (smoke  and  toxic  fumes).  Attaining  a 
cabin  pressure  of  4,267  m (14,000  ft)  (during  loss  of  cabin  pressure)  automatically  trips  the  emergency 
oxygen  system;  however,  the  automatic  oxygen  regulator  only  provides  a minimum  of  oxygen  flow  at  this  alti- 
tude--approximately  0.5  liter  NTPD  (normal  temperature/pressure/dry  or  21.1°C/760  mm),  expanding  to  only  a 
liter  or  so  in  terms  of  BTPS  (body  temperature/pressure/saturated  or  37°C/ambient/saturated) . At  rest  an 
individual  breathes  approximately  7 liters  per  minute;  therefore  the  difference  between  approximately  one 
liter  and  seven  must  be  composed  of  air  which  may  contain  smoke  and  toxic  gases. 

There  has  been  a general  desire  to  increase  the  breathing  time  of  the  smoke  hood  protective  device 

from  its  present  3-6  minute  (FAA  tests)  rebreathing  capability  (AIA  found  Boeing  system  provided  only  50 
seconds,  Schjeldahl  "DM  hood  1-1/2  minutes)  to  15  minutes  or  more.  However,  it  appears  questionable  whe- 
ther accident  experience  will  substantiate  such  a time  requirement.  The  civil  airlines  are  required  to 
demonstrate  that  their  air  transport  aircraft  can  be  evacuated  in  90  seconds  or  less.  FAA  burn  tests  have 
demonstrated  that  after  three  minutes  current  aircraft  interiors  are  no  longer  habitable  due  to  heat.  If 
a chemical  generator  is  employed  *n  the  smoke  hood  to  increase  breathing  time,  it  also  increases  complexity 
of  actions  necessary  by  the  user,  and  would  require  more  instruction.  Thus,  there  may  be  a reasonable  ar- 
gument to  dispute  a requirement  for  a longer  air  supply  than  currently  provided  in  the  Schjeldahl  "safety" 
hood,  which  appears  to  be  the  only  currently  available  smoke  hood  which  has  had  extensive  testing. 

Table  XIV  provides  a summary  analysis  of  the  Schjeldahl  septal  neck  seal  (Type  S)  smoke  hood,  which 
has  been  evaluated  as  the  best  available  device  within  the  current  state-of-the-art,  and  is  a production 
item  (see  Figs.  24  and  25).  Among  the  factors  which  tests  to  date  have  indicated  may  be  problems  are 
deterioration  characteristics,  durability,  reusability,  fit  on  passengers  other  than  adults,  ability  to 
don  the  hood  over  glasses,  hood  fogging,  vision,  effect  upon  passengers  with  cardiac  or  pulmonary  dys- 
function, CO2  buildup,  hypoxia,  and  legal  implications.  Most  of  these  problems  appear  solvable  or 
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insignificant  for  civil  or  military  transport  emergency  use. 

A detailed  analysis  of  the  system  safety,  maintenance,  hazards,  reliability,  and  human  factors  of 
the  various  smoke  hood/masks  available  within  the  state-of-the-art  have  been  made  and  a smoke  hood  func- 
tional flow  fault  tree  is  shown  in  Table  XV. 

It  is  concluded  that  the  currently  available  Schjeldahl  rebreathing  smoke  hood  with  septal  neck  seal 
(Type  S)  can  provide  significant  protection  from  smoke,  toxic  fumes,  and  flame  in  post-crash  fire  emergen- 
cy egress  and  its  demonstrated  merits  far  outweigh  any  potential  risks  or  problems. 

For  additional  selected  references  related  to  effects  of  fire,  heat,  and  CO2  on  man,  see  references 
586-619,  and  for  material  flammability,  references  620-666. 


TABLE  XIV. 

SUMMARY  OF  SYSTEMS  ANALYSIS  OF  SCHJELDAHL  SMOKE  HOOD  SYSTEM 


AMBIENT 

ENVIRONMENT 

MENTAL 

DEMANDS 

HAZARD 

EXPOSURE 

PHYSICAL 

DEMANDS 

.Polylmlde  (amide) 
films  capable  of 
protecting  in  ex- 
cess of  1400°F. 

.3-6  min  Op  supply. 

.Visual  acuity  not 
impaired  at  low  .05- 
foot-candles  levels 
of  illumination 
(models). 

.Infra-red  emlsslvl- 
ty  and  reflectance 
excellent. 

.Optical  trans- 
mission - not 
satisfactory  with 
model  D - excellent 
with  model  S. 

.Simple  to  don. 

.Tests  show  simple 
verbal  briefing 
adequate. 

.Requires  no  mechanical 
aptitude  or  skill. 

.Requires  little 
training,  little 
judgement,  ability 
to  follow  relatively 
simple  written  or 
oral  Instructions. 

.Requires  moderate 
recall . 

.Available  Op  - when 
COp  critical  level 
of  about  83.  reached 
sensation  of  choking 
will  cause  subject  to 
remove  hood. 

.Flammability  protec- 
tion - excellent. 

.Toxic  hazards  - ex- 
cellent with  model  S, 
fair  with  model  D. 

.Irritability  protec- 
tion - excellent  with 
model  S,  fair  to  poor 
with  model  D. 

.Hazard  level  category 
II  - marginal  (can  be 
counteracted  or  con- 
trolled without  Injury 
to  personnel  or  major 
system  damage  (MI L- 
STD-282) . 

.Simple  to  don. 
with  normal  use  of 
hands . 

.Can  be  donned  with 
one  hand  with  some 
difficulty. 

.Requires  little 
expenditure  of 
energy. 

.Readily  learned  by 
demonstration. 

HUMAN  FACTORS 
(MIL-STD-1 472A) 

SYSTEM  SAFETY 
(MIL-STD-882) 

TASK 

EXPOSURE 

.Some  difficulty  in 

.Present  hood  cannot 

.Potential  effect  of 

quickly  locating  neck 

remain  in  use  beyond  3-6 

improper  task  per- 

seal (needs  color  outline). 

min. 

formance  on  system 

.Instructions  adequate. 

.Can  Increase  donning  time 
and  decrease  problems  In 
donning  with  prior  ex- 
perience. 

.Hazard  Level  II . 

operation  cri tical . 

EQUIPMENT 

RELIABILITY 

MAINTENANCE 

CHARACTERISTICS 

(MIL-STD-785) 

(MIL-STD-470) 

POTENTIAL  VALUE 

.Material rmetal  Ized 
polylmlde  (Kapton). 

.Weight.  Not  slgnlf. 

.Size  (stored)  - packet 
(In  use)  16"  high 
12"  diameter. 

.Volume  - 26.5  1 iters. 

.Shape  - cyl indrlcal > 
with  domed  top. 

.Closing  (model  D)  - 
Elastic  fiberglass 
neck  drawstring. 

(model  S)  - Annular 
ring  of  elastomeric 
film  (3"). 

.Heat  resistance  - 
Polylmlde  film  with 
reflective  coating. 

.Vision  (model  D)  - 
2"  vision  band. 

(model  S)  - clear  hood. 


.General  - excellent  (only 
failure  determined  to 
date  occurred  when  one 
mask  ripped  in  coal  mine 
test) . 

.Life  cycle  decrement 
undetermined. 


.Accessibility  - excellent 

.May  be  problem  with  decre 
ment  with  repeated  usage 
(seal  breakdown). 

.Periodic  inspection  and 
replacement  would  prob- 
ably be  necessary. 

.Effect  on  depth  and  fre- 
quency of  maintenance 
requirements  at  each 
level . 

.Facilities,  support  equip 
ment,  skill  levels  and 
number  of  individuals  re- 
quired to  be  determined. 


.Tests  to  date  indi- 
cate offers  excellent 
protection  to  head 
and  face  in  flamma- 
bility. 

.Advanced  model  S sep- 
tal neck  seal  model 
offers  greater  pro- 
tection from  toxic 
fumes,  smoke,  and 
eye  irritabil 1 ty 
than  earl ier  neck 
drawstring  D model . 

.Tests  of  S model 
clear  hood  indicate 
no  signif.  vision 
acuity  decrement  un- 
der conditions  of 
low  illumination. 

.Limitation  of  3-6 
min  breathing  time 
can  be  increased  by 
modification  with 
self-contained  Op 
generator  or  com- 
pressed air  source. 
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TABLE  XV.  SMOKE  HOOD/MASK  FUNCTIONAL  FLOW  FAULT  TREE 


tear  failure 
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3.2.8  Discussion.  The  main  objective  of  this  portion  of  the  study  is  to  evaluate  the  practical 
usefulness  of  the  smoke  hood/mask  with  particular  attention  to  psychological  and  physiological  effects  on 
the  wearer  in  a flame,  toxic  fume,  and  smoke  post-crash  environment.  Studies  have  been  reviewed  relating 
to  considerations  of  visibility,  acoustics,  ease  of  donning,  time  of  use,  and  optimum  neck  seal  devices, 
as  well  as  effectiveness  under  various  smoke,  toxic  fume,  and  flame  environments.  Various  smoke  hood/ 
mask  concepts  as  applied  to  passenger  and  crew  member  emergency  evacuation  needs  have  been  reviewed.  The 
majority  of  the  information  and  testing  has  been  specifically  related  to  civil  air  carrier  application. 
Thus,  some  of  the  objections  outlined  in  the  preceding  sunrnary  of  test  results  may  not  be  valid  in  the 
military  environment. 

To  date  civil  air  carrier  organizations  appear  to  have  opposed  FAA-proposed  smoke  hood  requirements 
primarily  on  the  grounds  of  cost,  pilferage,  and  the  hazards  of  too  long  use.  Some  support  for  the  latter 
opinion  has  been  expressed  in  both  the  ATAA  Riley  report  and  in  FAA-sol icited  comments  from  NAS/NRC  scien- 
tists. It  has  been  noted  that  the  narcotic  effect  of  higher  (9.2%  level  CO2)  concentrations  of  CO2  can 
lead  to  sudden  unconsciousness,  and  after  asphyxiation,  to  unsuccessful  resuscitation.  Similarly,  it  has 
been  suggested  that  there  is  a danger  of  hypoxia  due  to  a limited  supply  of  oxygen.  Further,  the  legal 
implications  of  potential  liability  remain  unresolved,  and  are  outside  the  scope  of  this  evaluation. 

However,  concern  about  potential  hazards  of  hypoxia  and  insufficient  air  supply  appear  to  be  over- 
come by  new  devices  designed  with  their  own  self-contained  compressed  air  supply.  Attempts  to  increase 
the  time  of  usefulness  have  involved  addition  of  a self-contained  oxygen  generator  (fire  hazard),  and  con- 
sideration of  a chlorate  candle  (as  in  C-5A  pallet  seating  system).  The  Westinghouse/Schjeldahl  smoke  hood 
developed  under  the  "Coal  Mine  Rescue  and  Survival  Program,"  has  a J-shaped  canister  containing  a chlorate 
candle  and  15.2  x 7.6  cm  (6  x 3 in)  lithium  hydroxide  CO2  absorbent,  which  has  apparently  enabled  subjects 
to  breathe  for  a period  of  one  hour.  The  hood  itself  was  not  rigidly  tested  in  this  program,  nor  was  it 
designed  for  aircraft  fire  protection. 


Several  other  smoke  hood  protective  devices  have  been  developed  for  non-aviation  related  purposes 
which  might  have  potential  application  for  aircraft  passengers.  Lear-Siegler,  Inc.  markets  an  "Air  Cap- 
sule" which  provides  a 5-minute  air  flow.  This  consists  of  a transparent  hood  with  breathing  air  at 
351.8  kg/sq  cm  (5,000  psi)  (21%  0o,  74%  N,  5%  He)  contained  in  a double  coil  of  stainless  steel  tubing 
in  a cylinder  held  behind  the  neck.  Some  150,000  units  have  been  supplied  to  the  U.S.  Navy  for  emergency 
use.  Robert-Shaw  Controls  and  Scott  have  also  developed  emergency  breathing  devices  for  marine  or  indus- 
trial use.  Bendix  has  proposed  a system  to  the  USAF  for  escape  from  missile  silos  which  contains  a 10- 
minute  air  supply  in  a cylinder,  weighs  approximately  3.6  kg  (8  lb),  and  uses  a concept  of  venturi  recycling. 
A Bendix  program  in  cooperation  with  Schjeldahl,  designed  a hood  for  a Navy  proposal.  This  hood  has  an 
air  supply  canister  attached  to  it  to  provide  5-8  minutes  of  air.  A special  breather  bag  is  also  attached 
to  the  front  of  the  hood.  The  National  Institute  for  Occupational  Safety  and  Health  (NIOSH)  is  presently 
testing  a Lear-Siegler  hood  for  potential  industrial  use  which  incorporates  compressed  gas,  a venturi 
aspirator  and  CO2  scrubber,  and  which  may  provide  15  minutes  of  breathing  time. 


The  most  advanced  modification  of  the  Schjeldahl  smoke  hood  for  air  transport  passenger  egress  also 
involves  the  addition  of  a self-contained  compressed  air  supply.  Prototype  units  have  been  fabricated  by 
Schjeldahl  under  contract  to  FAA,  with  cylinders  fabricated  under  contract  to  U.S.  Divers.  As  shown  in 
Fig.  , this  consists  of  a 77.4  kg/sq  cm  (1,100  psi)  cylinder  clipped  to  the  hood  at  neck  level.  Activa- 
tion is  by  pulling  a cord  which  initiates  a mechanical  puncture  of  the  cylinder,  allowing  compressed  air 
to  flow  directly  into  the  hood.  The  flow  rate  can  be  adjusted  by  changing  orifice  flow  control  fittings 
to  provide  various  flows  and  durations.  Experimental  durations  of  four  to  eight  minutes  have  been  tested 
to  date  at  the  FAA's  Civil  Aeromedical  Research  Institute,  Oklahoma  City.  Tests  of  an  orifice  providing 
a four-minute,  forty-seven  second  duration  flow  calibration  has  been  found  to  provide  the  following  flow 
rates: 


Start 

1 minute 

2 minutes 

3 minutes 

4 minutes 

5 minutes 


8.5  1pm 

5.8  1pm 

3.5  1pm 

1.8  1pm 
0.7  1pm 
0.1  1pm 


In  addition,  this  modification  of  the  smoke  hood  has  been  improved  in  other  respects.  The  hood  is 
constructed  of  extra  heavy  Kapton  (.051  mm  [2  mil])  instead  of  the  standard  .025  mm  (1  mil)  polyimide  film 
(Kapton)  used  in  the  standard  rebreathing  hood.  This  provides  improved  aging  characteristics  (shelf  life). 
However,  little  is  known  of  the  aging  characteristics  of  the  elastic  polyurethane  film  of  the  neck  seal. 

The  hood  has  been  completely  metal ized,  except  for  a 5.1  cm  (2  in)  visibility  band. 

Although  tests  of  this  development  are  still  unpublished  some  results  available  to  date  show  the  fol- 
lowing characteristics  when  the  hood  is  donned  and  activated: 

(1)  After  activation  the  hood  begins  to  inflate  somewhat  like  a balloon.  Once  inflated,  the  cylin- 
der is  lifted  up  off  the  shoulders.  With  the  hood  distended  vision  is  improved. 

(2)  The  neck  seal  acts  as  a relief  valve,  and  CAMI  measurements  indicate  only  1 to  2 mn  Hg  of  posi- 
tive pressure  can  be  built  up  inside  the  hood.  A slight  eardrum  pressure  may  be  experienced, 
similar  to  diving  1.2  to  1.5  m (4  to  5 ft)  under  water. 

This  experimental  modification  of  the  Schjeldahl  smoke  hood,  as  well  as  the  Lear-Siegler  "Air  Cap- 
sule" and  other  developments  discussed,  appears  to  offer  one  solution  to  several  concerns  to  smoke  hood 
usage  in  current  civil  air  transport  aircraft  by  providing  a self-contained  air  supply.  The  compressed 
air  cylinder  offers  a means  of  increasing  the  air  supply  to  allow  greater  egress  time  duration  capability, 
and  thus  improved  occupant  protection.  However,  this  also  increases  the  complexity  of  the  device  and 
ironically  degrades  the  simplicity  of  the  original  hood.  For  successful  use,  briefing  or  training  becomes 
more  important,  since  a manual  action  is  required  by  the  passenger  after  donning  in  order  to  initiate  the 
air  supply.  On  the  other  hand,  even  if  the  wearer  neglects  to  pull  the  cord  to  initiate  the  air  supply 
at  all,  he  still  has  the  same  protection  as  the  rebreather  hood. 
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4.  ADVANCED  OCCUPANT  RESTRAINT  SYSTEMS 


In  recent  years  several  new  restraint  systems  have  undergone  development  and  testing,  primarily  due 
to  the  impetus  of  recent  federal  standards  for  automotive  vehicles.  While  considerable  emphasis  has  been 
placed  upon  the  development  of  inflatable  (air  bag)  passive  restraint  systems,  other  systems,  both  active 
and  passive,  have  also  been  developed  for  occupant  protection.  However,  not  all  restraint  systems  are 
applicable  to  the  air  transport  environment. 

This  section  is  prefaced  by  a general  discussion  of  current  operating  practice  and  federal  standards 
relative  to  occupant  (crew  and  passenger)  restraint  protection  in  air  transport  aircraft,  as  compared  to 
relative  human  whole  body  impact  tolerances  and  capabilities  of  various  configurations  of  restraint.  Sub- 
sequently, seat/restraint  design  principles  are  considered  from  a systems  viewpoint.  Particular  attention 
is  given  to  the  developmental  background  of  the  inflatable  passive  restraint,  and  the  various  features  of 
present  systems  and  components  are  described.  Relative  evaluation  of  sensors,  bag  and  diffuser  design, 
tolerable  sound  levels,  human  volunteer  performance  tests,  operating  temperature  ranges,  and  other  aspects 
vital  to  operation  are  considered.  Review  of  other  active  and  passive  state-of-the-art  systems  includes 
webbing  belt  restraints  which  automatically  are  locked  in  place  when  the  individual  sits  in  the  seat,  de- 
ployable net  restraints,  integrated  harnesses,  and  inflatable  belt  systems.  The  NASA  Ames  integral  air- 
craft passenger  seat  has  been  designed  specifically  for  future  air  transports  with  design  objectives  of 
attenuation  of  21  Gz  and  45  Gz  impacts  (8).  Rearward-facing  seating  is  also  considered,  with  an  evalua- 
tion of  test  data  and  current  crash  experience  relative  to  rearward  seating.  Currently  RAF  VC-10  (9  Gx) 
and  USAF  Lockheed  C- 141  (16  Gx)  or  Lockheed  C-5A  utilize  rearward-facing  seats,  but  few  civil  transports 
are  so  equipped  except  for  attendant  stations  on  some  aircraft  (McDonnell  Douglas  DC-10,  Boeing  B-747, 
and  Lockheed  L-l Oil). 

4.1  Current  Air  Transport  Restraint  Systems 

4.1.1  Passenger  Lap  Belt  Systems.  Present  civil  air  carrier  passengers  receive  minimal  crash  im- 
pact protection  in  comparison  to  either  state-of-the-art  design  capabilities  or  human  deceleration  tol- 
erances. Most  current  jet  transport  aircraft  utilize  1,224.7  kg  (2,700  lb)  webbing  metal -to-metal  buckle 
lap  belt  restraints  for  passengers,  although  some  aircraft  are  still  found  operating  with  older  fabric-to- 
metal  793.8  kg  (1,750  lb)  webbing  (792). 

Part  25,  Federal  Air  Regulations  [Airworthiness  Standards:  Transport  Category  Airplanes,  25 : 561 [b] , 

June,  1974  (670)]  states  that  "The  structure  must  be  designed  to  give  each  occupant  every  reasonable  chance 
of  escaping  serious  injury  in  a minor  crash  landing  when... (2)  the  occupant  experiences  the  following  ulti- 
mate inertia  forces  acting  separately  relative  to  the  surrounding  structure: 

(i ) Upward  - 2.0  G 
(i i ) Forward  - 9. 0 G 
( 1 i i ) Sideward  - 1 .5  G 

( i v ) Downward  - 4.5  G,  or  any  lesser  force  that  will  not  be  exceeded  when  the  airplane  absorbs  the 
landing  loads  resulting  from  impact  with  an  ultimate  descent  velocity  of  five  f.p.s.  [1.5  m.p.s.]  at  de- 
sign landing  weight. " 

British  Civil  Airworthiness  Requirements  for  ultimate  inertia  forces  are  not  substantially  different 
from  U.S.  requirements  (667).  However,  aft-facing  seats  are  recommended  under  their  Acceptable  Practices 
and  for  foward-facing  seats,  the  radius  of  the  arcs  of  travel  of  the  occupant's  head,  and  seat  back  speci- 
fications are  detailed. 

Current  values  for  occupant  protection  in  air  transport  impacts  specified  in  the  U.S.  FAR's  have  not 
changed  significantly  since  the  CAA  first  issued  such  requirements  for  certification.  Both  the  NTSB  (674) 
and  the  FAA  Office  of  Aviation  Medicine  have  strongly  recommended  increased  occupant  impact  protection  de- 
sign criteria  and  especially  seat/belt  strength  requirements  on  a number  of  occasions  over  the  past  decade. 

In  response  to  the  NPRM  69-33  issued  by  FAA  Flight  Standards  Service  (669),  the  Office  of  Aviation 
Medicine  transmitted  considerable  documentation  in  1969.  The  Office  of  Aviation  Medicine  recommendations 
were  (673,  675): 

Upward  20.0  G 
Forward  20.0  G 
Sideward  10.0  G 
Downward  20.0  G 
Rearward  20.0  G 

It  was  further  recommended  that  the  inertial  loads  related  to  a 77.1  kg  (170  lb)  occupant  be  established 
at  102.1  kg  (225  lb),  since  many  passengers  today  exceed  77.1  kg  and  therefore  compromise  the  safety  of 
the  current  seat  design.  In  support  of  these  values,  the  NASA  development  of  a lightweight  15.9  kg  (35  lb) 
seat  designed  to  protect  a 102.1 -kg  occupant  against  20  G forward,  20  G vertical  and  10  G lateral  accelera- 
tions was  cited  [Yost,  1969  (682)].  It  was  also  noted  that  the  Federal  Register  of  25  December,  1968 
contained  a definition  of  the  95th  percentile  U.S.  adult  male  as'ToTTT  kg  (223  lb)  partially  clad,  in  the 
25-34  year  age  bracket,  making  a fully  clothed  95th  percentile  male  at  least  102.1  kg  (225  lb).  In  com- 
parison, U.S.  Air  Force  transport  seat  design  specifies  a 113.4  kg  (250  lb)  design  occupant  weight  (MIL -S- 
26688)  (298). 

Research  conducted  by  the  Civil  Aeromedical  Institute  of  FAA  also  indicated  that  seat  failure  had 
occurred  in  a number  of  otherwise  survivable  accidents.  CAMI  investigations  of  five  air  transport  crashes 
during  the  preceding  six-month  period  from  August,  1968  to  January,  1969  were  cited.  Relative  to  inade- 
quate seat  restraint  protection  of  occupants,  these  accidents  included:  (1)  the  Piedmont  FH-227B  crash  on 
10  August,  1968  at  Charlestown,  W.  Va.,  fatal  to  35  of  37  aboard  (141);  (2)  the  Northeast  Fairchild  FH-227 
crash  on  25  October,  1968  near  Hanover,  New  Hampshire,  fatal  to  32  of  42  occupants  (153);  (3)  the  Allegheny 
Convair  580  crash  on  24  December,  1968  at  Bradford,  Pa.,  fatal  to  20  of  47  occupants  (152);  (4)  the  North 
Central  Convair  580  crash  at  Chicago  on  27  December,  1968,  fatal  to  27  of  45  occupants  (213);  and  (5)  the 
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Allegheny  Convair  440  which  crashed  near  Bradford,  Pa.,  fatal  to  11  of  28  occupants  (157). 

A March,  1968  staff  study  (673)  conducted  by  the  Office  of  Aviation  Medicine  stressed  the  following 
findings:  "Data  on  human  tolerance  limits  to  deceleration  (threshold  of  injury),  when  properly  restrained, 

far  exceed  the  ultimate  inertia  forces  for  a minor  crash  landing  as  specified  in  Part  25.561.  Conferees 
at  the  December,  1967  USAF-Industry  Life  Support  Conference  recommended  revising  load  factor  for  passenger 
Seats  from  the  present  16  G to  20  G and  that  aft-facing  seats  be  used  whenever  possible. 

"Experience  has  shown  that  survival  can  be  expected  and  has  occurred  repeatedly  at  crash  force  levels 
far  in  excess  of  the  minor  crash  landing  criteria  in  Part  25.561.  This  experience  confirms  the  experimen- 
tal data  accumulated  over  the  last  two  decades.  In  addition,  survivable  conditions  relative  to  the  occu- 
piable  area  have  been  found  to  persist  at  increasingly  higher  crash  force  levels.  Survivable  crash  force 
conditions  in  today's  modern  airplane  are  approaching  the  threshold  limits  of  human  tolerance  to  accelera- 
tive forces. 

"Conclusions:  There  are  no  standards  dealing  with  occupant  protection  in  moderate  to  severe  surviva- 

ble accidents.  It  is  concluded  that  human  tolerance  to  accelerative  forces  is  much  greater  than  the  forces 
generated  during  some  of  today's  'nonsurvivable ' accidents.  We  have  40  G people  riding  in  20  G airplanes, 
and  sitting  in  9 G seats  and  restraint  systems"  (23;  673). 

Similar  conclusions  have  been  repeatedly  expressed  in  a number  of  other  documents.  Analysis  of  61 
survivable  aircraft  crashes  by  the  Flight  Safety  Foundation  in  1967  indicated  that  nearly  half  of  the 
1,037  fatalities  and  serious  injuries  probably  could  have  been  prevented  by  the  use  of  improved  restraint 
systems  (4).  In  1967  Turnbow  (681)  recommended  design  loads  for  seats  and  lap  belt  restraint  systems  for 


fixed-wing  transport  aircraft  of: 

Forward-Facing 

Rearward-Facing 

Longi tudinal 

20-25  G 

35-40  G 

Vertical 

15-20  G 

15-20  G 

Lateral 

10-15  G 

20-25  G 

Time  duration,  sec 

0.2-0. 3 

0. 2-0.3 

More  recently,  after  a number  of  years  of  discussion,  a committee  of  the  Society  of  Automotive  Engi- 
neers has  proposed  a new  Aerospace  Recommended  Practice  1226  (ARP)  for  General  Aviation  Seat  Design  (for- 
ward-facing) for  25  G applied  20  degrees  to  either  side  of  the  longitudinal  axis,  an  aft  load  of  5 G,  an 
upward  load  of  15  G,  and  a downward  load  of  15  G (677).  This  ARP  still  requires  council  approval  before 
final  issue,  and  pertains  to  light  aircraft  only.  However,  civil  air  transport  ARP  682A  (Safety  Lap  Belts) 
(678)  is  also  currently  under  review. 

Society  of  Automotive  Engineers  ARP  767  (Impact  Protective  Design  of  Occupant  Environment-Transport 
Aircraft)  (679)  provides  information  for  the  design  engineer.  Part  6.1.11  indicates  that  forward  decelera- 
tion of  the  healthy  young  male  restrained  only  by  a seat  belt  of  5-cm  (2-in)  width  which  is  properly  posi- 
tioned on  the  hips  may  be  tolerated  up  to  33  G for  0.035-0.065  second  at  2,300  G/sec  onset  rate  with  minor 
complaints,  with  human  tolerance  limits  for  non-reversible  injury  to  50  G peaks  at  500  G/sec  rate  of  onset 
for  0.025  second  duration  with  both  shoulder  and  lap  belt  restraint  (issued  10-31-67). 

SAE  ARP  750A  (Passenger  Seat  Design-Commercial  Transport  Aircraft),  15  January,  1974  (676)  notes 
that  FAR's  and  technical  standards  order  (TSO's)  requirements  are  minimum  requirements  only,  but  does  not 
suggest  any  particular  dynamic  seat  load  requirements. 

In  accordance  with  Resolution  No.  162  adopted  at  the  meeting  of  IS0/TC  in  June,  1967  (672),  the  USSR 
prepared  a proposal  for  passenger  seats  in  aircraft,  which  also  exceeded  the  United  States  Federal  Air 
Regulations  Part  25.561: 

vertical  force  - from  4 G downward  to  4.5  G upward 
horizontal  force  - from  9 G forward  to  1.5  G backward 
side  force  - from  0 to  2.25  G 

The  passenger  weight  was  assumed  to  be  77  kg  (169.8  lb).  This  standard  is  the  same  as  British  Civil  Air- 
worthiness Requirements  as  far  as  forces  are  concerned  (667). 

Flight  deck  crew  seats  have  different  functions  than  those  for  the  passengers.  Most  have  a greater 
range  of  adjustment  for  comfort.  The  20.5  kg  (45  lb)  IPEC0  aircrew  seat  (IPEC0  Europe  Ltd.),  for  example, 
used  in  the  Fokker  F-27,  F-28,  BAC-111,  Mercury,  and  BW614  has  a special  lumbar  pad  which  can  be  adjusted 
3.2  cm  (1.25  in)  back  or  forward,  and  the  height  of  both  the  shoulder  pad  and  lumbar  pad  can  be  adjusted 
some  7.6  cm  (3  in)  relative  to  the  seat  pan.  The  most  complex  of  the  Concorde  crew  seats  is  that  of  the 
third  crew  member,  since  his  workload  is  such  that  the  seat  must  be  capable  of  moving  fore  and  aft  at  a 
controlled  speed  the  full  length  of  the  flight  deck,  stopping  or  starting  in  any  position.  In  addition, 
the  seat  must  be  able  to  move  laterally.  This  seat  is  probably  one  of  the  most  complex  yet  devised  for 
air  transport  use,  since  the  unusual  workload  necessitates  this  crew  member  to  be  forward  at  the  center 
console  to  monitor  throttles  during  takeoff,  to  move  aft  and  face  outboard  to  monitor  the  engineer's 
instrumentation  panel  (when  the  flight  deck  floor  is  at  maximum  angle  of  attack  and  acceleration),  and  to 
move  to  the  extreme  aft  end  of  the  flight  deck  to  monitor  circuit  breakers.  The  very  large  changes  in  pitch, 
attitude  and  acceleration  require  a 12°  change  in  back  angle  of  this  seat  for  different  crew  functions. 

The  seat  pan  is  mounted  on  a tubular  telescopic  pedestal,  and  to  prevent  head  jerk  at  initiation  of  seat 
movement,  an  el ectrical ly-operated  slugging  device  automatically  reduces  the  rate  of  seat  acceleration. 

A unique  feature  of  the  prototype  Boeing  B-2707-100  SST,  due  to  its  length  of  93.3  m (306  ft)  and 
resulting  bending  moment,  was  that  some  seats  were  designed  to  comply  with  load  factors  of  9 G forward, 

7.5  G downward,  4.5  G upward,  and  3 G sideward  (times  a factor  of  1.33).  This  was  because  seats  toward 
the  ends  of  the  cabin  would  be  subjected  to  greater  bending  moment  and  greater  load  factors  than  at  sta- 
tions toward  the  center.  Crew  stations  would  require  ultimate  seat  load  factors  of  16  G forward,  acting 
within  20  degrees  to  either  side,  compared  to  12  G for  passengers. 

As  an  attempt  to  relieve  some  of  the  circulation  problems  often  presented  in  sitting  for  long  periods, 
the  Circutone  Company  of  North  Hollywood,  California,  has  developed  a crew  seat  which  features  a series  of 
plastic  channels  built  into  the  seat,  which  are  inflated  pneumatically  in  sequence  to  provide  a continuous 
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massaqe  effect,  which  may  improve  comfort  on  long-range  flights.  McDonnell  Douglas  has  also  been  develop- 
ing crew  seat  design  as  on  the  DC-8  and  DC-9,  and  has  developed  an  adjustable  lumbar  seat  back  support 
consisting  of  a foam-filled  air  cushion,  which  is  integral  with  the  seat  back  cushion  and  can  be  inflated 
or  deflated,  conforming  to  the  individual  body  contours.  A recent  comprehensive  discussion  of  both  design 
hardware  developments  and  medical  functional  aspects  of  transport  crew  seats  is  found  in  Hawkins,  1974 
(671). 


In  high  performance  air  transport  aircraft,  the  consequences  of  not  wearing  restraint  on  the  flight 
deck  durinq  fliqht  can  be  tragic.  The  spectacular  crash  of  the  Russian  Tupolev  Tu-144  supersonic  transport 
at  the  1973  Paris  Air  Show  has  been  hypothesized  as  due  to  the  unrestrained  flight  test  engineer  being  in 
the  cockpit  with  a movie  camera  when  the  pilot  made  a sudden  evasive  maneuver,  perhaps  fearing  collision 
with  a nearby  French  Air  Force  Dassaul t-Breguet  Mirage  3R.  The  crew  member  may  have  fallen  against  the 
pilot  or  the  controls  during  this  critical  time,  precluding  recovery.  Four  bodies  and  a movie  camera  were 
found  upon  investigation,  where  only  three  should  have  been  (680). 

4.1.2  Current  Aircrew  Restraint  Systems.  Each  crew  member  seat  at  flight  deck  stations  must  have 
provisions  fora  shoulder  harness  (FAR  25.785g)  which  must  be  worn  during  takeoff  and  landing  unless  the 
wearing  interferes  with  crew  member  function  (Part  121.31).  Investigation  of  the  United  Boeing  727  crash 
at  Chicago  O' Hare  on  21  March,  1968  revealed  that  the  "crewmembers ' cuts,  bruises,  and  back  injuries  were 
received  as  a result  of  their  being  violently  tossed  around  inside  the  cockpit  by  the  crash  impact"  and 
prompted  the  NTSB  to  recommend  (28  January,  1969,  Not.  187,  69-27)  to  the  FAA  that  shoulder  harnesses  be 
required  for  aircrew  during  takeoff  and  landings  (674). 

Responding  to  the  NTSB  on  17  March,  1969,  the  FAA  issued  NPRM  69-33,  amending  Part  121.311(e)  to 
propose  that  shoulder  harnesses  be  worn  during  takeoff  and  landing.  On  12  August,  1969  this  requirement 
was  subsequently  adopted.  However,  as  a result  of  lack  of  shoulder  harnesses  being  worn  during  the  United 
Boeing  737  crash  at  Midway  on  8 December,  1972  (247);  in  the  North  Central  McDonnell  Douglas  DC-9  crash 
at  O' Hare  on  20  December,  1972  (261  );  and  in  the  Eastern  Lockheed  L-1011  crash  at  Miami  on  29  December, 

1972  (227),  the  NTSB  again  recommended  to  the  FAA  (674)  that  all  air  carrier  checklists  contain  a "fasten 
shoulder  harness"  item.  The  FAA  responded  (A-73-39)  on  16  July,  1973  by  revising  Air  Carrier  Operations 
Bulletin  No.  69-21  to  suggest  that  "fasten  shoulder  harnesses"  be  made  a standard  item. 

At  that  time  it  was  also  recommended  by  NTSB  that  FAA  amend  14  CFR  (Code  of  Federal  Regulations) 
25.785(h)  to  require  provisions  for  a shoulder  harness  at  each  cabin  attendant  seat,  and  amend  14  CFR 
121.321  to  require  that  shoulder  harnesses  be  installed  at  each  cabin  attendant  seat.  Some  30  years  had 
elapsed  from  the  first  NTSB/CAB  recommendation  (No.  32-0-38)  for  FAA  to  require  crew  upper  torso  restraints 
[Carroll,  1963  (668)].  On  29  January,  1973  (674)  NTSB  pointed  out  to  FAA  further  inconsistencies  relative 
to  shoulder  harnesses:  "Under  part  121,  the  degree  of  protection  afforded  crewmembers  flying  aircraft 

certified  before  January  1,  1958,  is  less  than  that  provided  in  more  recently  certified  aircraft,  where 
shoulder  harnesses  are  required  to  be  installed.  FAA  statistics  show  that  as  many  as  269  of  the  2,797 
registered  multi-engine  air  carrier  airplanes  still  in  service  were  certificated  prior  to  January  1,  1958. 
One  of  the  airplanes  in  this  category,  a Mohawk  FH-227,  crashed  at  Albany,  New  York,  on  March  3,  1972  kill- 
inq  14  passengers  and  the  two  crewmembers  on  the  flight  deck  (238).  This  aircraft,  although  manufactured 
in  1967,  was  type  certified  prior  to  1958  and  thus  exempted  from  the  shoulder  harness  requirement.  In- 
vestigation disclosed  that  the  Captain  and  the  copilot  might  have  survived  the  accident  had  they  worn 
shoulder  harnesses"  [NTSB  Not.  407,  CY  70-42,  1/29/70  (674;  238)]. 


4.2  Human  Impact  Tolerance  Design  Limits 

In  contrast  to  the  current  FAR  requirements  discussed  in  regard  to  forces  on  the  lap-belted  air 
transport  passenger  (Part  25.561),  field  data  from  aircraft  crash  investigations  and  research  data  related 
to  human  impact  testing  have  long  documented  that  current  requirements  provide  less  occupant  protection 
than  has  been  the  state-of-the-art.  In  this  respect  the  following  summary  and  discussion  of  restrained 
occupant  impact  tolerances  may  be  useful. 


Several  recent  state-of-the-art  evaluations  and  comprehensive  compendiums  are  available  related  to 
human  impact  tolerances,  and  should  be  referred  to  for  detailed  information.  These  include  "Whole  Body 
Tolerance  to  Impact"  [Stapp,  1966  (718)],  "Forces  on  the  Human  Body  in  Simulated  Crashes"  [Patrick  et  al . , 
1966  (701)],  "Occupant  Injury  Tolerances  for  Aircraft  Crashworthiness  Design"  [Snyder,  1971  (706)],  State- 
of-the-Art-Human  Impact  Data  [Snyder,  1972  (705)],  "Impact"  in  NASA  Bioastronautics  Data  Book  [Snyder 
1 9 / 3 T / 0 7 ) ] , and  most  recently,  "Survey  of  the  State  of  the  Art  of  Human  Biodynamic  Response"  in  Ai rcraft 
Crashworthiness  [King,  1975  (696)].  Selected  research  studies  are  also  listed  in  the  Section  4.2  references 
683-730.  Engineering  Design  Guides  (684,  688,  690,  693,  702,  727,  728)  also  present  current  data. 

Test  results  reported  for  human  subjects  restrained  only  by  a 7.6-cm  (3-in)  wide  nylon  lap  belt  are 
shown  in  Table  XVI  for  forward,  rearward,  and  sideward-facing  decelerations. 


The  USAF  design  guide  specifies  human  tolerance  limits  as  (298; 

.Upward  (headward,  eyeballs  down,  +Gz)  25.0  G 

.Forward  (backward,  eyeballs  out,  -Gx)  45.0  G 

or,  25.0  G 

.Sideward  (lateral,  +Gy,  lap  belt  alone)  9.0  G 

(lateral,  jjGy,  lap  belt  and 

shoulder  harness)  11.5  G 

.Downward  (footward,  eyeballs  up,  -Gz)  15.0  G 

.Rearward  (forward,  eyeballs  in,  +GX)  from  45,0  G 

to  83.0  G 


683) 

(for 

0.1 

sec) 

(for 

0.1 

sec) 

(for 

0.2 

sec) 

(for 

0.1 

sec) 

(for 

0.1 

sec) 

(for 

0.1 

sec) 

(for 

0.1 

sec) 

(for 

0.004  sec) 
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TABLE  XVI. 

HUMAN  SUBJECT  TESTS,  RESTRAINEO  BY  3M-WI0E  LAP  BELT 


. Forward-facing  (-Gx): 


Onset  Rate, 

Force,  lb  Peak  G G/sec 


4290 


15  300 

11.4-32.0  280-1,600 

26  850 

"30  "1,500 


. Rearward- facing  (+GX): 

30  1 ,065 

40  2,000 

82.6(chest)  3*800 

40 . 4 ( si ed ) 

>45 


.Lateral  (+Gy) : 

9 (average) 

14.1  600 


Time 

Ou rat ion 

sec  Response  Oata  Source 


0.002  Subjective  pain  threshold  Lewis  & Stapp  1957  (700) 

0.002  limit  with  no  significant  Stapp  1970  (721) 

0.002  injury  highest  voluntary  Lewis  & Stapp  1957  (700) 
level  tested;  transient  Stapp  1970  (721) 
injury,  minor  reversible 
injury. 


0.110 

0.040 

0.100 


No  injury. 

Severe  but  transient 
response. 

Highest  voluntary  measured 
test,  transient  injury. 
Estimated  injury  threshold 
Air  Force  design  limit. 


Stapp  1949  (711) 

Stapp  1949  (711) 

Beeding  & Mosely  1960  (687) 

HIAD  (683) 


0.100 

0.122 


Subjective  pain  threshold. 

Maximum  voluntary  pain 
level . 


Zaborowski  1966;  Zaborowski 
et  al.  1965  (729;  730) 
Sonntag  1968  (710) 


The  U.S.  Army  design  guide  provides  the  following  table  of  design  pulses  corresponding  to  the  95th 
percentile  accident  of  fixed-wing  transport  aircraft  (727;  690): 

TABLE  XVII. 

SUMMARY  OF  0ESIGN  PULSES  CORRESPONDING  TO  THE  95TH  PERCENTILE 
ACCIDENT  OF  FIXE0-WING  TRANSPORT  AIRCRAFT 


Impact  Direction 

Veloci ty 
Change 
(fps) 

Peak  G 

Average  G 

Pulse  Duration 
"T"  Second 

Longitudinal 

(Cockpit) 

64 

26 

13 

0.153 

Longitudinal 

(Cabin) 

64 

20 

10 

0.200 

Vertical 

35 

36 

18 

0.060 

Lateral 

(Cockpit) 

30 

20 

10 

0.093 

Lateral 

(Cabin) 

30 

16 

8 

0.116 

Source:  U.S.  Army  Aviation  Material  Laboratories  (727;  690) 


The  chapter  on  Impact  in  NASA's  Bioastronautics  Data  Book  [Snyder,  1973  (707)]  presents  a wide  range 
of  tolerances  related  to  restraint  system  used,  body  orientation,  magnitude,  direction,  distribution,  dura- 
tion, and  pulse  shape  of  the  force  resulting  from  the  impact,  as  well  as  biological  factors  of  age,  sex, 
and  physical  condition.  However,  human  tolerances  for  voluntary  decelerations  have  been  measured  on  humans 
to  the  following  values  without  injury,  in  young  healthy  male  subjects  under  full  body  restraint: 

.Upward  (+GZ)  220  G at  0.12  sec  (shoulder  harness) 

.Forward  (-Gx)  35  G for  0.061  sec  (seat  belt  only) 

58  G for  0.017  sec 

.Sideward  (+G„ ) 33.6  G at  710  ft/sec  R.0.  (standard  aircraft  shoulder 

harness) 

21,6  G at  .210  sec 


.Downward  (-Gz)  69.5  G at  0.01  sec  (shoulder  harness) 

.Rearward  (+GX)  82.6  G for  0.052  sec 
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While  such  maximum  peak  values  may  be  high  for  some  segments  of  the  population  such  as  children,  elderly, 
or  females,  these  voluntary  subjects  did  not  reach  the  injury  level,  and  the  survival  level  (non-reversi - 
ble  injury)  would  have  been  considerably  higher. 

In  the  forward -facing  (-Gx)  seated  position,  protected  only  by  the  lap  belt  restraint  still  found  in 
most  current  civil  aircraft,  human  subjects  have  been  voluntarily  tested  to  26  G.  In  a series  of  tests, 
Lewis  and  Stapp  [1957  (700)]  concluded  that  minimum  contusions  would  result  when  decelerative  force  exceed- 
ed 10  G,  at  300  G/sec  rate  of  onset,  for  0.002  sec  duration.  By  13  G,  at  the  same  onset  rate  and  time 
duration,  soreness  and  muscle  strain  would  be  expected.  At  the  highest  level  studied--26  G (at  850  G/sec 
for  0.02  sec)--al though  the  subject  complained  of  severe  epigastric  pain  lasting  for  30  sec  post-impact, 
and  thoracic  back  strain  for  two  days,  no  lasting  injury  was  reported.  In  this  case,  a 7.6-cm  (3-in) 
nylon  military  lap  belt  was  used;  impingement  pressure  was  calculated  to  be  6.3  kg/sq  cm  (89.5  psi),  and 
belt  loads  were  measured  at  1,946  kg  (4,290  lb).  Up  to  15  G,  these  levels  of  time  duration  and  onset  rate 
have  subsequently  been  considered  safe  for  human  volunteer  subjects  (for  subjective  pain  threshold  and 
transient  injury  only). 

For  the  forward-facing  position,  with  lap  belt  restraint  only,  Stapp  [1970  (721)]  concluded  that 
"rates  of  onset  between  250-1,600  G/sec  and  11.4-32.0  peak  G can  be  sustained  against  a lap  belt  restraint 
up  to  approximately  90  psi  [6.3  kg/sq  cm]  average  load,  with  no  significant  injuries  resulting."  Effects 
of  higher  loads  have  been  investigated  with  animal  subjects,  but  even  in  tests  where  the  lap  belt  was 
purposely  positioned  high  and  loose,  30  G peak  impact  (22.6  m/sec  [74.2  ft/sec]  entrance  velocity,  3,000 
G/sec  onset  rate,  20  deg  seat  pan  pitch,  0.055  sec  plateau  time,  0.094  sec  total  impact  duration)  produced 
no  significant  injury  [Snyder  et  al . , 1967  (708)].  It  has  been  found  that  seated  human  occupants  restrained 
by  a 7.6  cm  (3  in)  lap  belt  only  and  subjected  to  aircraft  crash  forces  can  survive  30  peak  G at  rates  of 
onset  below  1,500  G/sec  with  only  minor  reversible  injurious  effects.  When  this  is  increased  to  more  than 
38  G at  1,300  G/sec,  the  immediate  effects  of  deceleration  are  greater  than  at  45  G peak  at  500  G/sec. 

However,  as  has  been  pointed  out  by  Swearingen  et  al . [1962  (726)],  the  arcing  trajectory  as  the 
body  goes  forward  to  the  limits  of  the  belt  and  then  jackknifes  over  the  lap  belt  is  sufficiently  great, 
so  that  If  the  torso  is  not  also  restrained,  the  lap-belted  occupant  will  almost  certainly  strike  any 
forward  structure.  And  even  though  whole-body  loads  of  a 30  G deceleration  are  survivable  with  no  more 
than  minor  injury,  fatal  injuries  at  far  lower  levels  can  result  from  the  head  striking  the  sharp  forward 
structure.  Thus,  upper  torso  body  restraint  is  necessary  for  most  effective  crash  protection  of  the  seated 
forward- facing  aircraft  occupant. 

Use  of  upper  torso  restraint  increases  whole-body  human  tolerance  limits  to  approximately  50  G peak 
(at  500  G/sec  rate  of  onset  for  0.25  sec  duration)  [Stapp,  1951  (712)].  Changes  in  the  rate  of  onset  have 
been  found  to  have  direct  effects  upon  human  response  for  various  impulse  durations  [Snyder,  1971  (706)]. 
Peak  acceleration  of  approximately  45  G (0.09  sec  at  500  G/sec)  resulted  in  no  sign  of  human  voluntary 
shock,  yet  38  G for  0.16  sec  above  1,300  G/sec  was  found  to  produce  signs  of  severe  shock  [Stapp,  1951 
(712);  1970  (721)],  and  45  G for  0.23  sec  at  413  G/sec  produced  severe  delayed  effects  (run  215)  [Stapp, 

1951  (712)].  Air  Force  design  recommendations  have  been  given  as  45  G for  a duration  of  0.1  sec  or  25  G 
for  a duration  of  0.2  sec  (298;  683).  Restraint  in  the  experiments  establishing  these  limits  was  by  means 
of  a double  shoulder  harness  of  7.6-cm  ( 3- 1 n ) width,  a seat  belt  with  thigh  straps,  and  a chest  belt.  Even 
greater  tolerance  has  been  found  in  tests  with  more  optimum  protection.  Chimpanzee  tests  collaborate 
findings  from  human  free-falls  that  forward- facing  whole-body  tolerance  with  optimum  full-body  restraint 
may  be  about  237  G (at  11,250  G/sec  for  0.35  sec),  and  about  247  G (at  16,800  G/sec  over  0.35  sec)  [Stapp, 
1961  (717)].  Persistent  injury  was  found  above  135  G (at  5,000  G/sec  for  0.35  sec),  although  transient 
injury  effects  were  observed  at  60  G (at  greater  than  5,000  G/sec)  [Stapp,  1955  (716)].  It  is  clear  that 
there  is  a considerable  range  between  the  region  of  human  voluntary  exposure  tested  and  the  known  region 
of  injury. 

Rearward -facing  (+GX)  tolerances  are  considerably  higher  than  for  either  forward-  or  side-facing 
positions,  primarily  due  to  the  greater  distribution  of  loading  throughout  the  entire  back  area  of  the  seat- 
ed occupant,  and  thus  the  lower  kg/sq  cm  (psi)  per  unit  area.\  This  results  in  greater  stress  on  the  seat 
back  which  must  be  constructed  to  fail  at  higher  levels  than  a forward-facing  seat.  While  human  tolerance 
for  rearward -facing  body  orientation  has  not  been  clearly  established,  the  occupant  so  protected  can  be 
expected  to  withstand  40  G peaks  at  30  6 for  0.11  sec  duration  when  calculated  rate  of  onset  is  1,065  G/ 
sec  [Stapp,  1949  (711)],  and  40  G peaks  at  2,000  G/sec  with  severe  but  transient  responses  [Stapp,  1961 
(717)].  To  date,  a level  of  83  G (chest  acceleration)*  at  3,800  G/sec  for  0.04  sec  duration*  has  been 
tolerated  with  only  transient  injuries  reported  [Seeding  and  Mosely*  1960  (687)].  The  current  Air  Force 
design  limit  falls  between  this  and  45  G for  0,1  sec  endpoint  [AFSC,  1969  (298);  1974  (683)]. 

Knowledge  of  human  response  to  lateral  deceleration  forces  (jjSy)  is  very  limited,  but  tests  to  date 
strongly  indicate  that  tolerances  are  lower  for  this  position  than  for  either  forward-  or  rearward-facing 
body  orientations.  This  is  reflected  in  a change  in  SAE  Aeronautical  Recommended  Practice  767  , omitting 
side-facing  seating  recommendations.  Human  subjects  have  found  the  subjective  pain  threshold  to  be  only 
9 G (average)  for  a duration  of  approximately  0.1  sec  [Zaborowski , 1965  (729);  1966  (730)].  Even  when 
body  restraint  consisting  of  both  lap  belt  and  upper  torso  harness  is  worn,  Sonntag  [1968  (710)]  found 
the  maximum  voluntary  subjective  tolerance  to  be  14.1  peak  sled  G at  600  G/sec  for  0.122  sec  duration. 

Injuries  to  the  lower  extremities  are  statistically  the  second  most  frequent  type  of  trauma  found  to 
occur  in  aircraft  accidents.  They  are  seldom  life  threatening  in  themselves,  unless  extensive  loss  of 
blood  occurs.  But  unlike  such  injuries  in  ground  vehicles,  upper  or  lower  leg,  knee,  ankle,  or  foot  de- 
bilitation in  an  aircraft  accident  may  have  far  more  severe  consequences  in  cases  where  they  prevent  the 
individual's  post-impact  evacuation.  In  case  of  fire  or  other  hazards,  where  such  evacuation  must  be  com- 
pleted immediately,  even  relatively  minor  injury  may  result  in  fatal  consequences. 

To  determine  crash  loads  on  the  backs  of  aircraft  seats  caused  by  the  legs  of  passengers  striking 
the  seat  ahead,  in  1962  Snyder  tested  four  embalmed  male  cadaver  legs  on  the  FAA  bungee  decelerator  (705). 
Fracture  of  the  tibia  occurred  at  about  453.6  kg  (1,000  lb)  peak  load  on  each;  these  tests  were  also  of 
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interest  in  that  they  indicated  a seat  back  could  be  subjected  to  at  least  907.2  kg  (2,000  lb)  load  by 
the  legs  alone,  and  that  in  three-abreast  airline  configuration,  2,721.5  kg  (6,000  lb)  loads  could  occur 
during  impact  from  the  legs  alone. 

4.3  Principles  of  Restraint 

Through  high-speed  photographic  techniques  the  kinematics  of  the  seated  occupant  exposed  to  collision 
forces  have  been  well  documented,  particularly  in  automotive  impacts.  If  the  passenger  is  not  wearing  a 
restraint  system  and  the  aircraft  is  involved  in  a collision,  the  following  sequence  of  events  is  observed 
to  take  place.  First,  he  slides  forward  in  the  seat  until  the  knees  contact  the  seat  or  instrument  panel 
structure  ahead.  Second,  his  torso  pitches  forward  and  the  head  contacts  the  panel  or  seat  back.  Ex- 
tremely high  G-loadings  can  be  registered  in  the  head  during  this  portion  of  the  event,  particularly  if 
the  head  contacts  a food  service  tray  stored  in  the  seat  back.  Third,  the  neck  and  upper  torso  are 
stopped  by  the  upper  seat  or  panel  structure.  Fourth,  the  lower  portion  of  the  upper  torso  continues  its 
downward  motion  causing  the  head  to  be  bent  to  the  rear  (hyperextension)  relative  to  the  torso.  The  occu- 
pant will  then  rebound  back  into  the  seat  or  be  ejected  depending  on  the  direction  of  impact  and  seat 
position. 

The  three  basic  problems  in  providing  occupant  protection  are  demonstrated  by  this  example.  The 
first  of  these  is  to  restrict  the  motions  of  the  occupant  from  contact  with  structures  causing  injury.  In 
the  case  of  crew  members,  the  structures  would  consist  of  the  myriad  of  equipment  and  controls  present  in 
the  cockpit  of  the  aircraft.  Occupants  of  troop  seats  must  be  restrained  from  contact  with  their  neigh- 
bors. Passengers  of  rear-facing  seats  appear  to  be  in  the  best  position  to  avoid  this  problem  provided 
seat  structural  strength  is  sufficient  to  resist  crash  impact  loads. 

The  second  problem  in  providing  impact  protection  is  limiting  the  acceleration  G-loadings  and  forces 
applied  to  the  body  based  on  human  tolerance  data.  The  problem  faced  in  designing  aircraft  seating  has  one 
factor  not  often  found  in  automotive  crashes--vertical  G-loading  as  the  aircraft  impacts.  This  indicates 
that  seat  cushion  design  for  aircraft  application  has  greater  importance  than  in  the  automotive  case. 

This  problem  has  additional  importance  in  that  the  tolerable  loadings  in  the  spineward  direction  are  lower 
than  for  front- to-rear  loading.  In  designing  an  impact  protection  system  for  aircraft  use,  it  is  thus  as 
necessary  to  consider  the  energy-absorbing  properties  of  the  seat  cushion  as  it  is  to  consider  the  proper- 
ties of  an  upper  torso  restraint,  whether  it  be  an  airbag  or  an  Air  Force  harness.  Therefore,  in  devel- 
oping specifications  for  impact  protection,  the  relevant  life  support  system  can  be  defined  to  consist 
of  both  the  seat  and  the  restraint  system. 

The  third  problem  in  providing  impact  protection  is  limiting  extensive  motions  between  adjacent 
body  elements.  This  factor  was  also  illustrated  in  the  example  as  the  head  was  bent  to  the  rear  relative 
to  the  torso. 

A lap  belt  is  effective  in  avoiding  complete  ejection  from  a seat  but  is  not  capable  of  avoiding  all 
potentially  injurious  contacts  with  other  aircraft  structures.  This  is  particularly  the  case  with  crew 
seatinq  positions  where  the  occupant  faces  forward.  In  those  cases  the  upper  torso  must  be  restrained. 

This  is  accomplished  successfully  by  a variety  of  active  belt  restraint  systems  and  can  also  be  accomplished 
by  passive  restraint  systems  such  as  the  airbag.  The  lap  belt  may  be  eliminated  to  yield  a purely  pas- 
sive restraint  system  provided  provision  is  made  to  catch  the  knees  and  lower  part  of  the  torso  by  suita- 
ble energy-absorbing  structures.  This  can  be  accomplished  either  by  additional  passive  bag  deployment  or 
by  crushable  panels. 

Current-generation  airbag  and  upper  torso  belt  systems  do  not  provide  the  solution  to  the  restraint 
problem  in  side  G-loadings.  Dummy  test  subjects  in  side  impact,  restrained  by  standard  lap  belts  and  sin- 
gle diagonal  harnesses,  have  been  observed  to  slide  under  the  belts  and  end  up  almost  entirely  off  the 
seat  [Robbins  et  al . , 1970  (731)].  The  lap  belt  is  insufficient  to  restraint  the  pelvic  region  and  the 
shoulder  harness  does  not  prevent  the  upper  torso  and  head  from  contact  with  structures  adjacent  to  the 
seat  if  they  are  present.  It  seems  likely  that  this  problem  could  be  experienced  with  the  troop  seats 
observed  in  some  military  air  transport  aircraft. 

Some  insiqht  into  techniques  for  preventing  motions  to  the  side  are  found  in  studying  the  protective 
potential  of  children's  restraint  systems  [Robbins  et  al . , 1970  (732)].  In  this  case  side  impact  tests 
were  conducted  on  a Volvo  child  seat  which  provided  padded  structures  at  the  side  of  the  user.  This  effec- 
tively reduced  side  motions  and  distributed  the  loadings  over  the  body.  This  concept  of  side  impact  pro- 
tection was  also  incorporated  effectively  in  a prototype  integrated  seat/restraint  system  built  and  tested 
at  the  Highway  Safety  Research  Institute  of  the  University  of  Michigan  [Robbins  and  Roberts,  1971  (733)], 
and  more  recently  in  inflatable  side  protection  in  the  General  Dynamics  F-lll  fighter  [Shaffer  and  Brinkley, 
1974  (17)]. 

The  major  problems  in  rear  impact  protection  are  load  distribution  and  provision  for  head  restraint. 
These  features  have  been  effectively  included  in  rear-facing  seats.  A supplemental  lap  belt  is  necessary, 
however,  to  prevent  ramping  up  the  seat  back  and  rebound  after  impact. 

In  summary,  the  three  basic  problems  in  occupant  protection  during  crash  impact  are:  (1)  ejection 

from  the  seating  position,  (2)  application  of  excessive  forces  to  the  body;  and  (3)  the  occurrence  of 
large  relative  motions  between  adjacent  body  segments.  In  the  case  of  wake  or  other  forms  of  turbulence 
encountered  in  flight,  the  seat  belt  also  serves  to  prevent  ejection  and  possible  injury. 

4.4  Rearward-Facing  Seats 

During  the  past  three  decades  a considerable  number  of  studies  have  been  conducted  related  to  the 
occupant  body  orientation  relative  to  the  direction  of  the  impact  force.  These  have  been  recently  tabu- 
lated and  summarized  in  the  NASA  Bioastronautics  Data  Book  (707).  As  indicated  in  the  preceding  discussion 
of  impact  tolerances,  the  tolerances  for  rearward-facing  (+GX)  body  orientation  are  higher  than  in  either 
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forward-facing  or  sideward-facing  occupant  positions.  Chest  accelerations  as  high  as  83  G (at  3,800  G/ 
sec  onset  rate  for  0.04  sec  duration)  have  been  recorded  in  rearward-facing  tests  conducted  on  the  Daisy 
Track  at  Holloman  Air  Force  Base,  New  Mexico  [Beeding  and  Mosely,  I960  (687)].  However,  this  did  not 
represent  a non-reversi bl e injury  limit  for  this  subject  and  other  evidence  from  free-falls  and  sub-human 
primate  tests  have  indicated  that  survival  tolerances  may  be  more  than  three  times  higher  [Stapp,  1955 
(716);  1966  (718);  Snyder,  1972  (705);  1973  (707)].  On  the  other  hand,  human  tolerance  tests  have  to  date 
been  limited  to  young  healthy  male  volunteers,  with  tests  conducted  under  maximum  restraint  and  closely 
controlled  medical  conditions,  and  information  relative  to  tolerances  for  other  segments  of  the  population 
has  not  yet  been  developed.  The  accepted  U.S.  Air  Force  design  limit  is  45  -Gx  for  a duration  of  0.1  sec- 
ond or  25  -Gx  for  a duration  of  0.2  second  in  rear-facing  impact  (278;  683). 

The  research  data  appear  to  overwhelmingly  substantiate  that  the  seated  occupant  can  tolerate  much 
higher  crash  forces  when  oriented  in  the  rearward-facing  (+GX)  position.  There  has  been  a great  deal  of 
controversy  concerning  rearward-facing  seating  in  the  past.  Experimental  deceleration  studies  using  ani- 
mals and  human  volunteer  subjects  have  demonstrated  that  the  occupant  is  able  to  tolerate  greater  forces 
in  this  orientation.  However,  comparison  of  the  protective  advantages  of  rearward-facing  seating  in 
operational  conditions  has  been  difficult  to  objectively  determine  since  few  accidents  have  occurred  in 
which  passengers  were  facing  rearward  and,  of  these,  most  have  involved  propel lor-driven  aircraft  [Wilson 
and  Helmholtz,  1947  (779);  USAF  staff  study,  1947  (774,  767,  764);  Gronow,  1954  (747)].  NACA  analyses 
resulting  from  experimental  Curtiss  C-46  and  Fairchild  C-82  crashes  in  the  1950's  resulted  in  objective 
considerations  in  support  of  the  need  for  improved  seating, wwith  indications  that  properly  installed  rear- 
ward-facing seating  could  be  advantageous  [Preston  and  Pesman,  1958  (760);  Pinkel,  1960  (758);  Pinkel  and 
Rosenberg,  1956  (759)].  Early  studies  by  the  Royal  Air  Force,  particularly  Fryer  [1958  (744);  1959  (745); 
1962  (746)]  had  strongly  recommended  the  increased  protection  for  passengers  in  rearward-faci ng  seats. 

Fryer  [1962  (746)]  notes  that  "...it  was  soon  realized  during  the  second  World  War  that  those  seated 
in  aft-facing  positions  with  adequate  head  support  could  tolerate  higher  crash  forces  than  their  forward- 
facing colleagues.  This  can  be  attributed  to  the  distribution  of  the  decelerating  force  over  a much  larger 
and  more  suitable  surface  than  that  covered  by  the  conventional  harness."  The  RAF  Transport  Command  con- 
ducted tests  by  Pekarek  [1941  (756)]  and  Dudgeon  [1960  (741,  742)],  subsequently  introduced  25  G backward- 
facing seats  for  passengers  into  two  of  the  RAF's  post-war  transport  aircraft,  and  found  beneficial  results 
in  several  accidents.  Fryer  found  that  in  many  minor  accidents  the  differences  between  rearward-  and  for- 
ward-facing  passengers  were  "...slight  but  in  major  crashes  the  advantages  of  the  rearward-facing  position 
are  both  theoretically  and  practically  proved  to  be  considerable"  [Fryer,  1958  (744)]. 

Arguments  against  the  adoption  of  aft-facing  seats  appear  to  have  centered  about  concerns  for  addi- 
tional weight  which  might  be  necessitated  by  increased  strength  and  anchorage  requirements,  possible  added 
cost,  and  the  subjective  feeling  that  people  don't  like  to  ride  backward. 

Since  1946  rearward-facing  seats  for  passengers  have  been  installed  in  all  Royal  Air  Force  transport 
aircraft  brought  into  service  [Gronow,  1954  (747)],  and  16  G rearward-faci ng  passenger  seats  have  been 
specified  for  USAF  transport  aircraft  since  1951  (298;  740;  774).  U.S.  Navy  passenger  aircraft  which  are 
carrier  qualified  must  carry  passengers  rearward-facing,  but  otherwise  forward-facing  seats  are  utilized. 
During  the  early  1 950 ' s some  European  airlines  had  begun  to  provide  rearward-facing  passenger  seating. 

While  some  seats  in  many  air  carrier  configurations  through  the  years  have  been  rear-facing,  the  first 
flight  by  a commercial  airline  in  the  United  States  in  which  all  of  the  passengers  sat  facing  the  rear  was 
a North  American  Airlines  Douglas  DC-6  flight  into  LaGuardia,  New  York,  in  May,  1953  [Hawthorne,  1953 
(750)]. 

In  1947  the  U.S.  Army  Air  Force  Air  Transport  Command  modified  two  aircraft  for  transcontinental 
flights  with  all  passenger  seating  rearward -facing  (767).  Questionnaires  from  1,020  passengers  were  ana- 
lyzed and  it  was  found  that  the  subjective  results  were  overwhelmingly  in  favor  of  the  change  and  indica- 
ted no  discomfort  or  adverse  reaction  to  this  type  of  seating.  It  was  recommended  that  an  adequately 
stressed  aft-facing  seat  be  designed,  all  operational  air  transport  aircraft  be  modified  for  rear-facing 
passenger  seating,  and  a recommendation  made  to  "...include  in  specifications  for  future  transport  air- 
craft the  principle  of  rearward-facing  seats."  It  is  also  interesting  to  note  that  this  military  staff 
study  summarized  its  findings  in  rather  direct  language:  "If  the  rearward  seating  principle  is  disregarded, 

these  passengers  will  die.  It  may  well  be  economically  unfeasible  to  modify  present  aircraft,  but  when 
lives  are  balanced  against  dollars,  there  can  be  no  excuse  to  continue  designing  new  aircraft  without  em- 
bodying the  safety  factor"  (p.  3).  Appended  to  the  staff  report  in  a letter  of  transmittal  of  5 May,  1947 
(754)  were  results  of  the  questionnaires. 

In  1955  the  U.S.  Navy  Bureau  of  Aeronautics  established  a study  "which  would  support  the  selection 
of  either  the  forward  or  aft  seating  arrangement  for  passenger  type  aircraft  based  on  a comparative  evalu- 
ation under  crash  load  conditions"  [Noble  and  Domzalski,  1961  (755)].  In  this  series  of  tests,  eight  ex- 
periments utilized  two  male  volunteers  of  approximately  the  5th  and  95th  percentile  stature  dimensions, 
exposed  to  2 to  5 G (.25  to  .37  sec  at  1,100  G/sec)  while  seated  in  two  type  MIL-S-7877B  Weber  transport 
seats.  The  tests  were  intended  to  go  to  8 G;  the  reaction  at  5 G in  the  forward-facing  seat  precluded 
lap  belt  only  forward-facing  decelerations  above  5 G,  although  dummy  tests  subsequently  went  to  9.2  G. 

On  the  basis  of  this  comparison  it  was  concluded  that  "a  passenger  seated  in  the  aft-facing  position 
can  better  withstand  the  effects  of  rapid  deceleration  because  his  body  and  head  receive  support  from  the 
entire  back  of  the  seat"  [Noble,  p.  iii,  1961  (755)].  It  was  recommended  that  the  aft-facing  passenger 
seat  be  retained  in  military  passenger  type  aircraft  with  four  modifications.  The  modifications  included 
adding  an  adjustable  back  mechanism  to  the  right  armrest,  adding  a 2.5  cm  (1  in)  ensolite  padding  across 
the  lower  back  cross  member  to  eliminate  bottoming,  reanalyzing  the  seat  design  to  see  if  additional  bracing 
was  needed,  and  providing  a stop  plate  under  the  seat  to  prevent  "jackkni fing"of  the  passenger's  legs. 

A 1966  series  of  tests  conducted  by  the  FAA  (CAMI)  also  support  the  1961  Navy  study  recommending  rear- 
ward-facing seating,  although  for  different  reasons.  Dynamic  impact  tests  of  instrumented  anthropomorphic 
dummy  heads  into  the  backs  of  current  models  of  forward -facing  air  transport  seats  showed  that  portions  of 
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some  seats  have  good  deformation  characteristics.  However,  Swearingen  [1966  (724)]  considered  "lethal 
design"  features  to  include  tubular  construction,  rigid  serving  trays,  rigid  seat  arms  protruding  rearward 
between  seats,  and  excessive  break-over  forces.  In  impact  tests  against  the  backs  of  8 different  airline 
seats  at  9.1  m/sec  (30  ft/sec)  impact  velocity,  Swearingen  concluded  that  30%  would  have  been  fatal,  80% 
would  have  produced  facial  fractures,  and  97%  would  have  rendered  the  passenger  unconscious,  with  only 
3%  of  these  head  impacts  considered  to  show  that  the  passengers  would  have  survived  without  unconsciousness 
or  injury. 

The  USAF  16  "g"  passenger  seat  requirement  including  shoulder  harness  or  rearward-facing  seats  was 
adopted  in  1951  (Technical  Instruction  2140,  Installation  of  Seats  and  Shoulder  Harness  in  USAF  Aircraft), 
and  G factor  was  based  upon  a 113.4  kg  (250  lb)  occupant  (thus  1,814.4  kg  [4,000  lb]  ultimate  load  in  a 
16  G seat).  (Note  that  the  FAA  T50-C39  provides  only  for  a 694  kg  [1,530  lb]  ultimate  load  for  a 77.1  kg 
[170  lb]  occupant  in  a 9 G seat.)  In  1951  the  first  660  rearward-facing  seats  were  delivered,  and  the 
first  were  installed  in  a Military  Air  Transport  Service  Boeing  C-97  aircraft  by  Lockheed  Engineering  Com- 
pany. This  aircraft  made  its  first  flight  on  11  June,  1 951 . Subsequently  all  MATS  Boeing  C-97  aircraft 
were  modified  with  16  G rearward-facing  seats  as  they  received  1,000-hour  inspections. 

The  Air  Force  Systems  Command  Handbook  of  Instructions  for  Aircraft  Design  (AFSCM  80-1)  section  2.1 
related  to  passenqer  seats  states:  "Install  all  passenger  seats  to  face  rearward  and  locate  them  to  the 
rear  of  any  cargo  carried.  Comply  with  the  16  ' g ' strength  requirements  of  MIL-S-26688  (740)  for  passenger 
seats  on  transport  aircraft  which  are  used  alternately  for  carrying  cargo  and  passengers  and  install  them 
to  meet  the  requirements  in  MIL-A-8865. . . " The  most  recent  USAF/NASA  design  handbook  (AFSC  DH1-6  System 
Safety,  fourth  edition,  20  July,  1974)  specifies:  "The  maximum  protection  from  impact  forces  on  the  body 

is  provided  by  rearward-facing  seats.  Use  these  seats  for  all  passengers  and  for  crew  members  whose 
duties  do  not  require  them  to  face  forward"  [3Q2.1.  Seat  Orientation  (773;  298)].  Currently  the  USAF 
Military  Airlift  Command  (MAC)  primarily  utilizes  rearward-facing  seating  in  its  Lockheed  C-141A  Star- 
lifter  and  Boeing  C-135  troop  transport,  however,  not  all  seats  are  rear-facing.  In  the  C-141  a standard 
seating  arrangement  is  46  three-place  rear-facing  seats  (138  occupants)  without  a comfort  pallet,  or  120 
troops  in  three-place  rear-facing  seats  when  a comfort  pallet  is  available.  Such  seats  have  either  5.1 
cm  (2  in)  or  7.6  cm  (3  in)  lap  belts  with  no  shoulder  harness,  and  are  stressed  for  16  G impact  loads. 
However,  other  passenger  configurations  include  litter  arrangement  (head-first  body  orientation)  and  in 
cases  where  paratroops  are  carried,  the  rear-facing  seats  may  be  replaced  by  four  sections  of  side-facing 
net  seats.  There  is  also  a modification  of  this  arrangement  (C-141A  Kit  #1)  consisting  of  one  row  of  in- 
board-facing canvas  seats  positioned  along  each  side  of  the  cargo  compartment  (T.O.  1-C-141A-1). 

The  USAF  Boeing  C-135  cargo  carrier  or  troop  transport  and  KC-135  tanker  is  primarily  used  with  the 
Strategic  Air  Command,  and  has  provisions  for  up  to  135  passengers.  Military  Airlift  Command  also  operates 
five  Boeing  VC-137B  and  Boeing  VC-137C  models,  modified  from  the  Boeing  707  civil  air  carrier  version,  with 
a crew  of  seven  or  eight  and  50  passengers  which  is  used  for  the  President  and  government  officials.  Al- 
though USAF  aircraft  are  not  required  to  operate  under  FAA  airworthiness  bulletins,  the  89th  Military  Air- 
lift Wing  at  Andrews  AFB,  Maryland,  which  operates  the  VC  aircraft,  is  the  only  military  unit  in  the  USAF 
operating  under  FAA  standards  as  well  as  USAF  standards,  and  operates  its  own  FAA  certified  repair  station 
[Covault,  1974  (65;  736)].  A typical  SAC  configuration  includes  both  cargo  and  passengers  with  10  rear- 
facing seats  aft  of  the  cargo  area,  equipped  with  either  5.1-cm-  or  7.6-cm-wide  (2  or  3 in)  lap  belts. 

There  are  also  provisions  for  carrying  55  troops  in  folding  nylon  side-facing  seats  positioned  along  each 
side  of  the  fuselaqe  and  in  the  tail  section.  When  no  cargo  is  carried,  the  USAF  Boeing  C-135  passenger 
configuration  consists  of  42  aft-facing  track-mounted  triple  seat  units  mounted  on  either  side  of  the 
fuselage  for  six-abreast  seating,  for  126  rear-facing  passengers  (436).  When  the  aircraft  is  utilized 
for  aero-medical  evacuation,  44  litters  and  eighteen  triple  aft-facing  seat  units  for  54  passengers  can 
be  mounted. 

Thus,  while  not  all  USAF  passengers,  even  in  the  Lockheed  C-141  or  Boeing  C-135,  travel  in  aft-facing 
seats,  this  is  the  predominant  passenger  orientation  for  most  operations.  The  Royal  Air  Force  presently 
utilizes  rearward-facing  seating  for  passengers  in  the  VC-10  transport.  Comets,  Brittanias,  Belfasts,  and 
some  Hercules  transports;  however,  the  RAF  has  no  experience  to  date  with  these  aircraft  where  passengers 
have  been  subjected  to  impact  deceleration  in  rearward-facing  seats. 

4.4.1  Rear-Facing  Passenger  Accident  Experience.  The  accident  data  for  Lockheed  C-141  and  Boeing 
C-135  aircraft  have  been  previously  presented  in  summary  form  but  information  was  not  available  from  the 
Air  Force  to  compare  rear-  versus  forward-facing  passenger  survivability.  Although  there  has  reportedly 
been  a C-141  accident  in  Australia  involving  rear-facing  passengers,  and  isolated  air  carrier  accidents 
where  some  occupants  have  been  seated  in  rear-facing  seats,  unfortunately  information  is  limited  relative 
to  operational  accident  experience  in  current  jet  air  carriers. 

Accident  comparisons  between  rear-  and  forward-facing  occupants  has  now  extended  over  two  decades. 
Investigation  of  casualties  and  fatalities  in  a study  of  20  crash  landings  in  Consolidated  B-24  type  air- 
craft indicated  that  persons  in  the  rear  were  seven  times  less  likely  to  be  fatally  injured,  three  times 
less  likely  to  have  serious  injury,  and  three  times  more  likely  to  have  no  injury  as  passengers  or  crew 
forward  of  the  leading  edge  [Wilson  and  Helmholtz,  1947  (779)].  In  1954  the  Royal  Air  Force  reported 
results  of  eight  years'  experience  with  rear-facing  seats  in  all  RAF  military  transports  required  since 
the  end  of  World  War  II.  Comparisons  were  made  between  four  types  of  RAF  Transport  Command  two-engined 
Dakotas  and  four-engined  Yorks  (both  having  mainly  forward-facing  seating)  and  two-engined  Valettas  and 
four-engined  Hastings  (primarily  aft-facing  seating)  for  the  years  1946-1953.  For  this  period  21.6%  of 
passengers  involved  in  forward-faci ng  seating  (substantial  damage  or  destroyed  Dakota  or  York  aircraft) 
were  fatally  or  seriously  injured,  while  in  comparison,  only  6.4%  of  the  rearward-facing  passengers  (Valet- 
tas and  Hastings)  were  fatally  or  seriously  injured  [Gronow,  1954  (747)]. 

Subsequently,  a USAF  study  of  accident  data  from  all  USAF  Transport  accidents  over  a 2-1/2  year 
period  (1955-57)  resulted  in  finding  that  injuries  to  those  passengers  facing  forward  were  seven  times 
greater  than  received  by  those  facing  to  the  rear  [Moseley,  1957  (753);  Stanfield,  1957  (764)].  Of  3,108 
occupants  in  survivable  military  transport  accidents  during  this  period,  2,990  received  no  injuries. 
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including  almost  1 00%  of  those  facing  to  the  rear.  Four  percent  of  those  forward-facing  received  major 
injuries  and  1.3%  of  those  forward-facing  were  fatally  injured.  Data  for  both  high  impact  and  "survivable" 
air  transport  accidents  showed  that  98.3%  of  passengers  facing  rearward  received  no  injuries.  In  compari- 
son, 11.1%  of  those  in  forward-facing  seats  were  killed  and  4.5%  received  major  injuries.  Predominant 
injuries  to  aft- facing  passengers  involved  the  extremities.  At  that  date  the  USAF  reportedly  used  rear- 
ward-facing seats  for  all  aircraft  used  strictly  for  air  carrier  use. 

An  Air  Force  Convair  C-131,  equipped  with  rear-facing  passenger  seats,  crashed  short  of  the  runway 
at  Tinker  AFB,  Oklahoma  after  fuel  starvation  in  1962.  Investigation  revealed  that  injuries  to  several 
occupants,  including  a general  officer  aboard,  were  attributed  to  incorrect  installation  of  several  sets 
of  armrests  on  rearward-facing  seats  which  permitted  failure  of  the  seat  back  in  a moderate  force  acci- 
dent (748,  749).  One  previously  described  accident  involved  a Boeing  KC-135A  which  made  a 3-engine  ap- 
proach and  crashed  short  of  the  runway  with  56  crew  and  passengers  aboard,  destroying  the  aircraft  in  the 
post-crash  fire.  This  aircraft  had  26  rear-facing  seats  aft  of  the  cargo  section  (refer  to  Fig.  19).  Al- 
though evacuation  was  accomplished  in  45  seconds,  11  passenger  fatalities  were  attributed  to  effects  of 
fire  and  smoke.  Of  the  12  occupants  injured,  no  rearward-seated  passengers  were  reported  to  have  received 
impact  injuries.  In  a more  recent  crash  on  5 April,  1975  in  Vietnam,  a USAF  Lockheed  C-5A  crashed  near 
Saigon  when  the  aft  cargo  door  and  ramp  blew  off  in  decompression  and  severed  the  flight  controls  as  a re- 
sult of  the  locks  on  the  rear  cargo  door  and  ramp  coming  unlatched  in  flight.  Of  330  persons  aboard  there 
were  reported  to  be  155  survivors;  however,  the  Air  Force  has  released  no  information  to  date  related  to 
those  occupying  rearward-facing  seats  on  this  aircraft. 

4.4.2  Other  Considerations.  In  1968  as  a result  of  an  FAA  Office  of  Aviation  Medicine  staff  review 
of  accident  experience  and  adequacy  of  the  existing  air  transport,  and  proposed  V/STOL  tentative  airworthi- 
ness Standards  for  Transport  category,  one  major  recommendation  was  to  "require,  where  practicable,  aft- 
facing  seats"  [Staff  report,  1968  (768)].  It  has  been  shown  that  current  air  transport  cabin  structures 
can  remain  reasonably  intact  at  crash  force  levels  of  20  G (for  23  msec  at  rate  of  onset  of  approximately 
1,500  G/sec),  which  is  considerably  less  than  the  rear-facing  human  occupant  can  tolerate.  It  is  of  in- 
terest to  note  that  the  16  G seat,  originally  designed  by  the  Aeromedical  Laboratory  of  the  USAF  Air  Mate- 
rial Command,  contained  aluminum  sheet  structure  6.8  kg  (15  lb)  lighter  than  the  6 G seat  it  replaced. 

The  1967  USAF  Industry  Life  Support  Conference  concluded  that  human  tolerance  to  +G-,  probably  exceeds  50  G. 
This  conference  recommended  revising  the  load  factor  to  25  G for  crew  seats  and  20  G for  passenger  seats, 
and  that  aft-facing  seats  be  used  wherever  possible  (23). 

More  recent  studies  by  von  Beckh  [1969  (776,777)]  have  reported  that  during  the  post-decompression 
emergency  descent  of  multi-mach  high-altitude  aircraft  the  occupants  will  be  subjected  to  deceleration- 
induced  inertial  loads  in  the  direction  of  the  flight  path  which  will  reach  or  exceed  0.5  G.  In  such  a 
situation  he  reports  that  forward-facing  passengers  who  have  not  been  able  to  don  the  oxygen  mask  may  lose 
consciousness  for  various  periods  of  time  and  will  assume  positions  which  are  not  favorable  for  the  re- 
covery from  hypoxic  stress.  On  the  other  hand,  von  Beckh  recommends  a reassessment  of  the  value  of  aft- 
facing  seats  since  aft-facing  passengers,  even  if  unconscious,  would  still  be  supported  by  their  seat  back 
and  would  be  forced  into  an  advantageous  (for  recovery)  semisupine  position  by  the  combined  effect  of  the 
aircraft's  negative  altitude  angle  and  the  decelerative  load.  This  work  points  up  a new  advantage  of  aft- 
facing  passenger  seats  particularly  pertinent  in  today's  high  altitude  passenger  flights. 

The  major  advantage  of  rearward-facing  impact  protection  is  that  the  crash  loads  are  distributed  over 
a larger  portion  of  the  body.  This  results  in  less  load  per  unit  area,  and  increases  the  capability  of 
the  occupant  to  withstand  greater  crash  forces  than  were  he  seated  in  a forward-facing  lap-belted  position. 
However,  this  raises  the  center  of  gravity  and  loads  the  seat  back  higher,  thereby  stressing  the  seat  back 
and  tie-down  anchorages  greater  than  in  a forward-facing  position.  This  requires  a stronger  seat  and 
stronger  attachments  due  to  the  higher  loading.  A passenger  seat  cannot  simply  be  turned  around  and  per- 
form adequately  in  a crash.  The  requirement  for  greater  seating  strength  for  rearward-facing  seats  does 
not,  however,  necessarily  mean  that  it  will  be  more  costly  or  weigh  more.  Tests  conducted  by  the  Air 
Force  and  previously  mentioned  in  this  paper,  have  shown  that  the  16  G rearward-facing  seat  was  6.8  kg 
(15  lb)  lighter  than  the  6 G forward-facing  seat  it  replaced,  while  studies  by  Stapp  [1963  (766)]  for  air 
transports,  by  Swearingen  [1958  (769)]  for  general  aviation  aircraft  seats,  and  by  NASA  (8)  for  20  +GX  for- 
ward-facing commercial  passenger  seating,  have  also  indicated  that  stronger,  lighter  seats  can  be  built 
with  today's  technology.  Time  motion  studies  were  made  by  Stapp  and  Lewis  [1956  (778)]  of  20  subjects  ex- 
posed to  6 G and  12  G in  aft-facing  and  forward-facing  seating,  and  resulted  in  recommendations  regarding 
rearward  seating  of  transport  passengers  in  relation  to  escape  from  survivable  crashes. 

The  concerns  expressed  by  some  individuals  that  people  do  not  like  to  ride  rearward  in  an  aircraft 
have  not  been  substantiated  in  past  studies  [USAF  Staff  Study,  1947  (767);  FAA  Staff  Study,  1968  (768); 
Kubokawa,  1974  (8)].  In  the  1971  evaluation  of  USAF  transport  aircraft  seating,  the  rearward-facing  Boeing 
C-135  and  Lockheed  C-141  16  G seats  were  found  to  offer  substantially  better  occupant  crash  protection  over 
any  other  civil  airline  passenger  seats  in  use  [Snyder  and  Robbins,  1971  (21);  Snyder,  1975  (20)].  There 
seems  to  be  ample  evidence  that  current  technology  can  provide  rearward-facing  seats  with  even  lighter 
weight,  greater  strength,  and  at  relatively  less  cost  per  unit  than  current  rearward-facing  seats.  Review 
of  all  pertinent  impact  test  data  strongly  supports  the  considerably  increased  crash  protection  offered  to 
the  occupant  seated  in  a rearward-facing  seat. 

4.5  Advanced  Active  Systems 

Any  restraint  system  which  requires  the  user  to  "actively"  adjust  or  get  into  is  known  as  an  active 
system,  and  this  includes  most  restraint  systems  currently  in  use,  ranging  from  those  used  in  racing  cars 
to  configurations  used  by  astronauts.  To  date,  there  are  at  least  100  different  configurations  of  restraint 
systems,  many  of  which  are  reviewed  in  references  792,  784,  and  786.  Belt  restraint  systems  are  often  re- 
ferred to  as  2,  3,  4,  or  5-point  systems,  which  refers  to  the  number  of  attachment  or  anchorage  tie-down 
points  used.  A single  lap  belt,  therefore,  is  a 2-point  system,  being  attached  to  a structure  at  either 
end,  and  is  also  known  as  a type  1 belt  under  FMVSS  208.  However,  if  a single  upper  torso  belt  is  added, 
(type  2 belt  system)  it  can  be  a 3-point  system  (if  the  upper  end  is  anchored  separately,  but  the  lower 
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end  attaches  directly  to  the  lap  belt,  as  at  the  buckle),  or  a 4-point  system  (if  the  upper  end  is  anchored 
separately,  and  the  lower  end  is  also  separately  anchored  to  the  floor  structure).  Many  European  motor 
vehicles  use  a continuous  lap  belt/upper  torso  belt  slip-through  system,  employing  one  buckle  and  three 
attachment  points.  Almost  all  current  air  carrier  passenger  seats  use  a single  lap  belt  arrangement,  with 
the  tie-downs  usually  to  the  seat  structure  itself,  rather  than  to  the  floor  structure  (as  is  often  the 
case  for  flight  deck  crew  positions). 

As  noted  in  Section  4.2,  restraint  of  the  upper  torso  prevents  the  seated  occupant  from  jackknifing 
forward  and  striking  structures  during  impact,  and  has  been  required  for  all  front  seat  outboard  positions 
in  motor  vehicles  manufactured  for  sale  in  the  United  States  since  1 January,  1968  [FMVSS  208  (782)]. 

In  February  of  1973  the  FAA  issued  an  NPRM  which  would  make  the  installation  of  shoulder  harnesses 
mandatory  in  newly  certified  general  aviation  aircraft  (manufactured  one  year  from  the  effective  date  of 
the  proposed  amendment),  through  amendment  of  Part  23.785(g)  and  addition  of  a new  Part  23.785(h)  (781). 
However,  to  date  few  air  carrier  type  aircraft  are  equipped  with  upper  torso  restraints  for  passengers. 

One  exception  is  the  Grumman  G-2  Gulfstream  Corporate  jet  flown  by  Chrysler  Corporation,  which  employs  an 
integrated  diagonal  upper  torso  restraint  for  passengers.  This  is  probably  the  most  advanced  system,  ex- 
cept for  rearward-facing  military  systems,  currently  in  operation  for  air  transport  passengers.  U.S.  FAR 
Part  25  (Airworthiness  Standards:  Transport  Category  Airplanes)  (780)  specifies  that  each  seated  occupant 

must  be  protected  by  a safety  belt  and  "as  appropriate  to  the  type,  location,  and  angle  of  facing  of  each 
seat,  by  one  or  more  of  the  following:  (1)  A shoulder  harness  that  will  prevent  the  head  from  contacting 

an  injurious  object..."  (780).  Since  there  is  such  a variety  of  active  restraint  systems  available  and 
there  is  a very  extensive  literature  dealing  with  development  and  testing,  this  paper  will  only  review 
selected  advanced  state-of-the-art  devices  and  concepts.  Other  systems  have  been  previously  covered  in 
some  detail  in  references  785  and  792. 

4.5.1  Integrated  Upper  Torso  Restraint.  Integrated  restraints  are  those  in  which  the  restraint  is 
attached  to  (and  retracts  into)  the  seat  itself.  This  concept  was  proposed  in  1909  (783),  and  has  been 
proposed  in  almost  all  recent  automotive  experimental  vehicles,  such  as  the  Ford  "Aurora"  and  "Techna," 
General  Motors  "Astro  I,"  "Runabout,"  and  "Mako  Shark"  and  Chrysler  Corporation's  "300X"  futuristic  con- 
cept vehicles.  Such  systems  have  also  been  proposed  for  the  Liberty  Mutual  capsule  seat  design,  the  Re- 
public Aviation  Division,  Fairchild  Hiller,  New  York  Safety  Sedan,  the  Cox  seat  (Cox  of  Watford,  Ltd.), 
the  Irvin  Safety  seat,  and  the  Winebrenner  concept,  as  detailed  in  reference  792.  Fig.  43  illustrates 
one  type  of  integrated  harness,  developed  by  Ford  Motor  Company,  but  never  used  in  production  vehicles. 

This  can  utilize  either  a single  diagonal  harness,  as  shown,  or  a double  upper  torso  harness  as  proposed 
in  1909  (783). 


Fig.  43.  An  integrated  harness  system  in  which  the  upper  torso 
restraint  retracts  into  the  seat  back  as  designed  for  the  Ford 
Techna  future  idea  car  (Photo  courtesy  Ford  Motor  Company). 


In  a 1971  study  conducted  for  the  National  Highway  Traffic  Safety  Administration  by  the  Highway 
Safety  Research  Institute,  the  University  of  Michigan,  design  concepts  of  integrated  restraint  systems 
were  developed  and  tested  [Robbins  et  al . , 1971  (784)].  These  tests  were  preceded  by  a series  of  analytical 
studies  utilizing  two-  and  three-dimensional  mathematical  models  of  an  automobile  crash  victim.  Impact 
tests  were  conducted  in  frontal,  oblique,  side,  and  rear  tests  using  anthropomorphic  dummies  for  one  of 
these  systems  (described  in  Section  4.5.2).  As  shown  in  Fig.  44,  one  triple  bench/bucket  seat  system  (as 
could  be  utilized  in  an  air  transport  aircraft)  was  developed  which  consists  of  an  upper  torso  restraint 
which  retracts  by  inertia  reel  into  the  seat  belt,  side  protection,  and  an  automatically  adjusting  lap 
belt.  The  other  three  systems  included  a (1)  bucket  seat  with  airbag  torso  restraint  and  energy  absorbing 
lower  panel  (pure  passive  system),  (2)  bucket  seat  with  inverted  Y-yoke  harness,  and  (3)  bucket  seat  with 
3-point  harness  system. 
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Fig.  44.  Integrated  bench  seat-restraint  system  with 
3-point  harness  [Robbins  et  al  . , 1971  (784)]. 


Advantages  of  the  integrated  seat  system  are  that  it  would  allow  for  optimum  belt  angles  on  the 
occupant  since  the  system  would  be  independent  of  seat  movement.  In  addition,  there  would  be  no  loose 
belts,  because  when  not  in  use  they  would  retract  into  the  seat,  making  them  easier  to  don.  Balanced 
against  these  advantages,  however,  are  a number  of  disadvantages.  Such  seats  must  be  constructed  to  con- 
tain and  provide  maintenance  access  for  interior  reels,  retractors  or  other  devices,  yet  be  built  strong 
enough  to  protect  against  high  G loads.  Since  the  shoulder  harness  would  retract  into  the  seat  back  above 
the  shoulder  level,  the  higher  center  of  gravity  during  forward  deceleration  would  require  considerable 
structural  strengthening  beyond  that  for  current  airline  seats.  Nevertheless,  this  system  offers  some 
distinct  packaging  advantages  for  ease  in  passenger  use. 

4. 5. 1.1  NASA  Ames  Integrated  System.  The  National  Aeronautics  and  Space  Administration 
initiated  studies  in  1966  to  analyze  and  propose  modifications  to  existing  commercial  transsonic  aircraft 
to  provide  improved  passenger  protection.  This  was  funded  under  the  Life  Support  and  Protective  Systems 
subprogram  of  the  Human  Factors  System  Program,  a line  item  of  the  1966  Congressional  Authorization  to 
NASA.  An  initial  conceptual  study  was  conducted  by  Stencel  Aero  Engineering  Corporation  of  Asheville, 

North  Carolina  (NASA  contract  NASw-1530)  for  the  "improvement  of  human  survival  in  civilian  aircraft  emer- 
gencies" [Yost  and  Oates,  1969  (682)].  Examining  FAA  data,  a definition  of  the  boundary  between  a surviva- 
ble  and  non-survi vabl e accident  as  a function  of  flight  velocity  and  impact  angle  was  determined.  Crash 
data  available  indicated  to  them  that  70  to  80%  of  all  aircraft  injuries  were  as  a result  of  face  or  head 
impacts  to  passengers  as  the  upper  torso  flailed  forward  in  a crash.  Following  lap  belt  dynamic  tests  of 
5th  and  95th  percentile  dummies,  it  was  concluded  that  allowing  excess  seating  clearance  for  unrestrained 
torso  motion  was  neither  economically  feasible  nor  safe  for  the  passenger,  and  that  head  and  torso  restraint 
of  the  airline  passenger  was  a safe  and  practical  way  to  protect  against  flail  injuries.  Interior  survi- 
val for  the  passenger  was  focused  on  energy  absorbing  seat  designs  [Yost  et  al . , 1970  (789)]. 

The  integrated  restraint  concept  has  been  a basis  for  the  air  carrier  passenger  seat  under  develop- 
ment by  NASA  since  1968.  This  system  features  a double  upper  torso  harness  and  lap  belt  with  inertial 
reels,  although  the  upper  torso  harness  does  not  retract  into  the  seat  as  in  the  systems  discussed  in  the 
preceding  (4.5.1)  section.  The  NASA  Ames  design  effort  arose  from  an  attempt  to  provide  maximum  safety, 
comfort,  and  protective  features  for  the  airline  passenger  into  a single  seat  design,  and  to  demonstrate 
that  "steps  can  be  taken  to  prevent  future  airline  crash  fatalities  or  passenger  injuries  which  can  be 
attributable  directly  to  inadequate  seat  design"  [Kubokawa,  1974  (8)].  An  in-depth  design,  fabrication, 
and  impact  analysis  was  conducted  to  design  passenger  protection  in  high  G impacts  (20  -Gx  horizontal, 

36  +GZ  vertical,  and  16  +Gy  lateral).  The  method  for  absorbing  impact  energy  was  accomplished  by  a com- 
bination of  stretching  stainless  steel  cables,  breaking  of  stitch  threads,  and  use  of  a hydraulic  mechanism 
and  special  Temper  Foam  cushions.  Since  this  seat/restraint  development  undoubtedly  represents  the  most 
advanced  passenger  seat  available  for  future  air  carriers  it  is  recommended  that  Kubokawa 's  report  (8)  be 
examined  in  greater  detail  than  is  summarized  here.  The  report  by  Ball  et  al . [1972  (786)]  also  provides 
background  relating  to  the  development  from  1966  to  1972. 

The  constraints  which  went  into  this  seat  were  as  follows: 

(1)  Not  to  exceed  the  dimensions  of  the  new  generation  aircraft  seats  (B-747,  L-1011, 

DC-10,  B-2707  SST) . 

(2)  Not  weigh  over  2.3  kg  (5  lb)  more  than  the  new  generation  aircraft  seats--present 
single  seats  weigh  28.6,  22.7,  and  19.5  kg  (63,  50,  and  43  lb)  first  class,  to 
13.6  kg  (30  lb)  economy  class. 

(3)  Be  able  to  attenuate  20  G in  the  horizontal  direction  (-Gx)  (it  was  tested  to 
21  -Gx  successfully) . 

(4)  Be  able  to  attenuate  36  G in  the  vertical  direction  (+GZ)  (it  was  successfully 
tested  at  45  +GZ) . 
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(5)  Be  able  to  withstand  at  least  3 G in  the  lateral  direction  (+Gy). 

(6)  Not  exceed  106.7  cm  (42  in)  pitch  (normally  allowed  for  present  overseas 
flights).  Pitch  being  the  distance  from  the  back  of  one  seat  to  the 
back  of  the  seat  directly  in  the  front  or  the  rear. 

(7)  Incorporate  all  the  safety  and  human  engineering  features  as  recommended  by 
NASA,  Ames  Research  Center. 

(8)  Be  comfortable  when  seated  for  long  periods. 

(9)  Be  constructed  with  nonflammable  material  (i.e.,  cushion,  upholstery,  etc.), 
and 

(10)  Incorporate  the  new  NASA  Ames  restraint  system. 

A list  of  21  negative  safety  features  of  current  airline  seats,  and  11  additional  safety  hazards  associated 
with  present  seats  in  aircraft  crashes  was  noted.  The  unsafe  features  of  currently  used  airline  seats 
were  made  a basis  for  studying  improvements  which  resulted  in  the  NASA  Ames  seat.  At  the  same  time,  NASA 
also  proceeded  to  explore  fire  retardant  paint  and  chemicals,  jellied  aircraft  fuel,  emergency  escape 
systems,  and  other  advanced  concepts  which  might  have  applicability  to  increasing  survivability  in  air- 
craft emergencies. 


PLATFORM 


Fig.  45.  The  NASA  Ames  seat  reclining  system  [After  Kubokawa,  1974  (8)]. 


The  NASA  Ames  airline  seat  is  composed  of  two  major  elements,  as  well  as  special  impact  attenuating 
and  passenger  comfort  equipment.  An  inner  seat  consists  of  an  aluminum  structure  with  a fixed  seat  angle 
of  105°  between  the  seat  pan  and  seat  back.  The  seat  pan  is  at  a 6°  incline  from  the  horizontal  when  in 
the  normal  upright  position.  The  inner  seat,  including  both  seat  pan  and  back,  can  be  placed  in  a com- 
fortable reclining  position  up  to  12°  further  by  depressing  a seat  positioning  switch  and  leaning  back. 

The  entire  inner  seat  reclines  from  a single  pivot  point,  while  in  present  air  carriers  only  the  back  of 
the  seat  reclines.  The  outer  shell,  which  fastens  to  the  floor,  is  the  primary  structure  to  which  the 
impact  attenuating  devices  and  the  inner  seat  are  attached.  The  outer  shell  is  an  aluminum  structure 
formed  over  with  fiberglass,  and  bolted  to  the  aircraft  floor.  The  shell  is  padded  on  either  side  and 
provides  passenger  Drotection  from  lateral  jostle  and  free-flying  objects  during  impact.  As  shown  in  Fig. 
46,  various  locations  of  the  outer  shell  house  the  lights,  attache  case  compartment,  stereo  speakers,  food 
tray,  warning  indicators,  volume  balance,  sound  control,  stewardess  call,  light  control,  seat  control 
switches,  and  ash  tray.  The  padded  inside  top  area  of  both  sides  of  the  outer  shell  house  the  stereo 
speakers  and  lights.  The  armrests  are  constructed  as  part  of  the  outer  shell  and  the  food  tray  is  built 
into  the  left  armrest,  eliminating  many  hazards. 

The  double  torso  belt  with  inertia  reel  seat  belt  restraint  (Figs.  48  and  49)  has  been  demonstrated 
to  restrain  a passenger  safely  at  22  G in  the  horizontal  direction  without  submarining  or  ejection.  In 
the  NASA  seat  design,  the  peak  load  energy  is  absorbed  by  the  stretching  of  energy  absorbing  cables  and 
the  activation  of  other  energy  absorbing  mechanisms  located  between  the  inner  and  outer  seat  structures. 

The  four  portions  of  this  structure  include  upper  vertical  and  lower  horizontal  assemblies  of  Type  304 
stainless  steel  wire,  a pivoting  hydraulic  cylinder  used  to  allow  the  fixed  length  cable  to  move  with  the 
inner  seat,  a nylon  restraint  webbing  with  specially  stretched  patterns,  an  outer  shell  structure,  and  in- 
ner energy  absorbing  seat  cushions.  The  cushions  (Temper  Foam)  were  specially  produced  by  Dynamic  Systems, 
Inc.  of  Lercester,  North  Carolina. 
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Fig.  46.  NASA  Ames  integral  aircraft  passenger  seat  [After  Kubokawa,  1974  (8)]. 


Fig.  47.  Unrestrained  passenger  seated  with  food  tray  in  place  (folds  back  into  side)  in  final 
configuration  of  NASA  seat  (Photo  courtesy  C.  Kubokawa,  NASA  Ames). 
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Fiq.  48.  The  restraint  system  shown  in  this  mock-up 
seat  features  upper  torso  protection.  Freedom  of 
movement  is  allowed  by  inertia  reels  in  the  integrated 
seat  (Photo  courtesy  C.  Kubokawa,  NASA  Ames). 


Fig.  49.  Details  of  NASA  Ames  integrated 
restraint  system  in  mock-up  seat  (Photo 
courtesy  C.  Kubokawa,  NASA  Ames). 


Three  series  of  impact  tests  were  conducted  on  four  prototype  seats  (8;  787;  788;  789).  The  first 
series  was  conducted  in  June,  1970  at  the  AVSER  dynamic  crash  facilities  of  Dynamic  Science,  a division 
of  Marshall  Industries,  in  Phoenix,  Arizona,  utilizing  test  equipment  made  available  by  the  U.S.  Army  Air 
Mobility  Research  and  Development  Laboratory  at  Ft.  Eustis,  Virginia  (787).  A second  series  of  tests  were 
conducted  on  two  new  seats  in  October,  1971  at  the  FAA's  Civil  Aeromedical  Research  Institute  (CAMI)  at 
Oklahoma  City,  and  a third  series  of  vertical  tests  were  conducted  at  CAMI  in  March,  1972  to  45  +GZ  levels, 
exceeding  the  design  objectives. 

While  this  seat/restraint  system  has  been  designed  specifically  for  airline  passenger  use,  and  it 
appears  to  have  been  the  first  to  have  such  an  extensive  research  effort  in  development,  several  questions, 
as  posed  by  Kubokawa,  remain  unanswered.  What  use  will  the  20  G seat  be  when  the  aircraft  starts  to  fall 
apart  around  14-17  G?  (Present  floor  anchorages  are  only  designed  for  9 G stress.)  Is  it  economically 
feasible  for  airline  use?  (There  is  no  weight  penalty  over  current  first  class  seats.)  Will  the  air 
carriers  or  airframe  manufacturers  be  willing  to  spend  the  funds  necessary  to  restress  the  floor  attachment 
points  for  new  aircraft  seats?  What  about  passenger  acceptance?  It  was  also  noted  that  the  prototype  seat 
reclining  mechanism  was  electromechanical  and  the  second  was  mechanical -hydraul ic , while  a simple  nonspring 
loaded  mechanical  system  would  be  even  more  desirable.  Nevertheless,  the  NASA  Ames  airline  passenger  seat 
has  been  found  to  attenuate  G loads  of  21  -Gx  and  45  +GZ,  or  over  twice  the  horizontal  capability  and  10 
times  the  vertical  capability  of  present  seats.  The  capability  of  this  seat  has  been  well  documented  and 
it  would  appear  that  field  testinq  in  selected  air  carrier  operations  would  be  the  logical  next  step. 

4. 5. 1.2  Chrysler  Corporate  System^  The  Grumman  Gulfstream  G-2  corporate  jet  operated  by  the 
Air  Transportation  Division,  Chrysler  Corporation,  Willow  Run  Airport,  Ypsilanti,  Michigan,  contains  a num- 
ber of  advanced  safety  devices,  includinq  passenqer  seats  containing  an  upper  torso  integrated  restraint 
svstem.  As  shown  in  Fig.  50,  upper  torso  restraint  is  provided  by  a single  diagonal  belt  (3-point  system) 
attached  to  an  inertia  reel  contained  within  the  seat  back.  When  the  seat  is  not  occupied,  the  belt  re- 
tracts out  of  the  way.  The  inertia  reel  allows  comfortable  normal  forward  movements  of  the  head  and  shoul- 
ders, locking  up  and  restraining  the  upper  torso  only  in  a deceleration  exceeding  approximately  2-3  G.  When 
seated  the  belt  is  donned  by  buckling  the  lap  belt  and  then  bringing  the  upper  torso  belt  down  to  attach 
(Fiq.  51)  at  the  center.  In  this  respect  it  differs  from  the  automotive  3-point  belt,  which  generally 
attaches  to  the  side.  Additional  protection  from  side  (and  head)  impact  is  provided  by  deep  side  contours. 
This  system  (Fig.  52)  is  very  similar  to  the  integrated  restraint  system  developed  by  Robbins  et  al  . [1971 
(784)]  for  NHTSA,  at  the  University  of  Michigan  (Fiq.  53),  except  that  in  the  latter  system  the  upper 
torso  connects  to  the  lap  belt  at  the  side. 
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Fig.  50.  Integrated  seat  utilized  opera- 
tionally in  Chrysler  Corporation's  Grumman 
Gulfstream  G-2  let  corporate  aircraft. 


Fig.  51.  The  upper  torso  belt  is  attached 
to  an  inertial  reel,  allowing  freedom  of  mo 
tion,  but  restraint  in  +2G  deceleration. 


Fiq.  52.  In  this  configuration  the  belt 
buckles  at  the  center.  This  seat  is  also 
capable  of  rotating  180°  and  can  be  used 
in  a rearward-facing  orientation. 


Fiq.  53.  Integrated  restraint  system  designed 
and  developed  by  HSRI,  The  University  of  Michi- 
gan on  NHTSA  advanced  concepts  contract  (Robbins 
et  al.,  1971). 


4.5.2  Y-Yoke  Inertia  Reel  System.  The  Y-yoke  harness  with  inertia  reel  is  not  a new  system,  but 
represents  a distinct  variation  of  an  aircraft  torso  harness  and  inertia  reel  system  in  that  the  torso 
harness  is  independent  of  the  seat  back.  As  shown  in  Fig.  54,  the  reel  is  attached  overhead,  rather  than 
to  the  seat,  thereby  avoiding  any  downward  force  on  the  shoulders  (which  may  contribute  to  the  submarining 
action),  and  direct  loading  to  the  top  of  the  seat  back  (high  C.G.).  This  system  also  differs  in  that  the 
left  and  right  shoulder  belts  come  together  as  a yoke  ( "inverted-Y”)  behind  the  head,  continuing  upward 
to  the  reel  as  a single  belt.  The  1957  work  by  Barecki  of  the  American  Seating  Company  was  probably  the 
first  design  of  this  type  of  system  (790).  In  1958,  several  tests  of  this  device  were  conducted  by  Col. 

Stapp  at  Holloman  AFB,  using  cars  which  were  towed  and  snubbed  to  a stop  (790).  In  three  tests,  human 
volunteers  with  head  positioned  forward  (pre-flexion)  were  exposed  to  18  (average)  G on  the  chest  (26  peak 
G) . In  more  recent  tests  Snyder  et  al . (791)  exposed  baboon  subjects  on  the  Daisy  track  at  Holloman  AFB,  New 
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Mexico  to  three  tests  in  the  forward-facing  (-Gx)  0-0-0  body  orientation  at  30,  43,  and  49  G peaks,  and 
one  lateral  90°  test  (-Gy)  0-90-0  at  32  peak  G.  Entrance  velocities  ranged  from  22.4  to  28.8  m/sec  (73.6 
to  94.4  ft/sec),  onset  rates  from  2,700  to  6,100  G/sec,  and  time  plateaus  from  0.045  to  0.060  second. 
Based  upon  relative  comparisons  with  over  60  tests  in  identical  deceleration  patterns  with  similar  sub- 
jects, it  was  concluded  that  this  system  offered  better  restraint  than  the  lap  belt  alone,  or  the  single 
upper  torso  restraint  (3-point)  system. 


Fig.  54.  Inverted  Y-yoke  harness  system  with  inertia 
reel  mounted  in  roll -bar,  as  used  in  specially  modi- 
fied Shelby  American  Ford  G7-350  and  GT-500  vehicles. 


The  inverted  Y-yoke  harness  with  inertia  reel  was  tested  in  an  integrated  bucket  seat  concept,  de- 
veloped and  impact  tested  for  the  National  Highway  Traffic  Safety  Administration  by  Robbins  et  al.  [1971 
(784)]  at  Highway  Safety  Research  Institute,  the  University  of  Michigan.  Fig.  55  illustrates  the  frame- 
work design  of  the  prototype  seat.  This  concept  featured  a bucket  seat  with  side  protection  and  was  con- 
sidered the  most  promising  active  system  of  those  concepts  considered,  which  included  an  airbag  system. 


Fiq.  55.  Prototype  inverted-Y  integrated  40  G seat 
designed  and  impact  tested  for  NHTSA  by  HSRI , The 
University  of  Michigan  [Robbins  et  al . , 1971  (784)]. 
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The  A-frame  side  structures  are  designed  to  withstand  40  G crash  impacts  from  any  direction  with  the  added 
loading  of  a 95th  percentile  male  occupant  (97.5  kg  [215  lb]).  (Present  FAR  requirements  for  static  tests 
are  77.1  kg  [170  lb]  dummies,  with  no  requirement  for  dynamic  testing.)  Attached  to  the  framework  is  22- 
qauge  sheet  steel,  designed  to  deform  and  absorb  energy  during  impact.  A 5.1  cm  (2  in)  layer  of  HD300 
styrofoam  covers  the  seat  back,  headrest,  seat  cushion,  and  inside  of  the  side  structures.  This  material 
is  crushable  under  a load  of  about  10.5  kg/sq  cm  (150  psi).  The  prototype  seat  weighs  31.8  kg  (70  lb), 

10.4  kg  (23  lb)  heavier  than  current  automotive  production  bucket  seats,  but  this  could  be  reduced.  A 
series  of  fifteen  impact  sled  tests  were  conducted  at  HSRI , the  University  of  Michigan. 

The  inverted  Y-yoke  double  torso  restraint  with  inertia  reel  was  installed  in  (1966-1969)  specially 
modified  Shelby  Mustang  GT  350  and  GT  500  cars,  after  development  and  tests  by  Ford  Motor  Company.  Modi- 
fications have  also  been  used  in  racing  cars  and  by  Ohio  State  University  in  their  fleet  of  Piper  Cherokee 
140  training  aircraft.  Performance  in  known  crashes  has  been  found  to  be  unusually  effective,  with  no  in- 
juries yet  known  to  anyone  wearing  this  system.  Crashes  included  3 automotive  collisions  exceeding  112.7 
km/h  (70  mph),  and  2 aircraft,  one  which  impacted  at  144.8  km/h  (90  mph),  and  subsequently  impacted  in  an 
inverted  orientation.  This  system  could  be  used  in  an  integrated  seat  such  as  the  NASA  Ames  system,  but 
since  it  is  most  effective  with  a higher  roll-bar  or  ceiling  mounting,  probably  would  not  be  the  best 
system  for  airline  seats.  One  advantage  is  that  it  is  easy  to  don;  it  slips  over  the  shoulders  and  the 
two  torso  straps  extend  to  the  side  rather  than  under  the  arms  as  in  other  double  belt  systems.  This  is 
more  comfortable  for  females  and  more  acceptable  for  dressy  clothes  as  it  does  not  wrinkle  clothing  as 
other  belt  systems  may.  In  addition,  the  Y-yoke  has  acted  as  a head  restraint  in  several  accidents,  al- 
though it  has  not  been  tested  for  that  aspect. 

4.5.3  Seating  Energy  Absorbing  Devices.  About  90  percent  of  all  airline  passenger  seats  are  cur- 
rently manufactured  by  four  major  manufacturers : Aerotherm  Transportation  Equipment  Division  of  the  Uni- 

versal Oil  Products  Co.,  Bantam,  Conn.;  Fairchi ld-Hi 1 1 er 1 s Burns  Aero  Seat  Co.,  Burbank,  California;  Day- 
co  Corporation ' s Hardman  Tool  and  Engineering  Co.,  Los  Angeles;  and  Weber  Aircraft  Division  of  Walter 
Kidde  and  Co.,  Inc.,  Burbank.  The  trend  is  toward  lighter  models  of  seats,  which  presently  range  from 
about  19.5  kg  (43  lb)  to  35.4  kg  (78  lb)  each.  For  future  aircraft  lighter  seats  could  increase  range  or 
payload  by  several  tons  per  airplane.  Many  of  these  seats  are  now  designed  to  some  extent  for  controlled 
structural  deformation  as  a means  of  energy  absorption  which  helps  protect  the  occupant  during  an  impact. 

In  these,  the  front  legs  collapse  as  load  is  applied.  Energy  could  be  absorbed  in  various  deceleration 
devices  built  into  the  seat  system.  While  seats,  energy  absorbers,  and  hardware  may  seem  peripheral  to 
the  scope  of  this  paper,  the  seat  is  often  an  integral  part  of  the  restraint  and  several  components  will 
be  briefly  noted.  Such  devices  absorb  part  of  the  energy  of  impact  by  allowing  controlled  forward  dis- 
placement of  the  seat  when  subjected  to  load. 

Early  work  was  done  by  Pinkel  and  Rosenberg  (759),  and  Hart  (797)  which  showed  the  potential  effec- 
tiveness of  these  devices.  The  "piccolo  tube”  decelerator  is  a linear  hydraulic  energy  absorber  which 
dissipates  energy  by  the  displacement  of  water  through  multiple,  sharp-edged  orifices  in  the  tube  wall. 

By  varying  the  orifice  hole  sizes  along  the  length  of  the  tube,  a constant  pressure,  and  thus  a constant 
retarding  force,  can  be  achieved  throughout  the  arresting  stroke.  Another  energy  absorber  is  the  stain- 
less steel  strap  decelerator  which  absorbs  energy  in  straining  the  material.  The  lengths  depend  upon  the 
magnitude  of  deceleration  and  pulse  time  duration  desired.  The  Kroell  or  invert  tube  (799)  absorbs  energy 
simply  by  turning  a thin-walled  ductile  metal  tube  inside  out.  Another  system,  the  load-limiting  (all- 
over)  type  of  energy  absorber,  is  based  upon  extrusions  of  wire-bending  devices.  These  are  recommended 
for  cargo  restraints  [Russo,  1966  (802)]  and  take  three  major  configurations.  The  two-spool,  single- 
platen unit  has  two  spools  attached  to  one  end  of  the  platen,  one  of  which  stores  all  wires  woven  through 
the  top  side  of  the  end  hole  in  the  platen,  while  the  bottom  spool  stores  wires  woven  out  of  the  bottom 
side  of  the  same  hole.  A variation  of  this  is  the  two-spool,  double-platen  unit,  utilizing  two  platens 
functioning  as  a single  unit.  A third  type  involves  wires  stored  like  a ball  of  twine  in  a canister. 

Another  form  of  load  limiter  uses  the  shock-tube  controlled  collapse  principle  of  some  airline  seats.  Be- 
cause of  dissatisfaction  with  the  performance  of  stainless  steel  straps,  mechanical  springs,  and  hydraulic 
energy  absorber  units,  a unique  energy  absorption  system  was  devised  for  the  rear  supporting  legs  of  the 
Aerotherm  passenger  seats  for  air  transport  aircraft  (20.4  kg  [45  lb]  double,  26.8  kg  [59  lb]  triple). 

The  sheet  metal  seats  deform,  instead  of  fracturing  as  an  extrusion  or  tube  might,  and  the  rear  legs  extend 
when  a 9 G load  is  exceeded.  This  extension  is  produced  by  metal  deformation  functioning  as  the  energy 
absorber,  allowing  the  seat  to  pivot  forward.  Such  a design  can  take  a load  of  30  G for  0.04  sec,  or  20  G 
for  0.065  sec.,  allowing  the  seat  and  tie-downs  to  remain  more  intact  in  an  impact. 

An  earlier  Aerotherm  concept  called  the  Bennett  Hammock-Type  Aircraft  Seat  consisted  of  two  large 
springs,  between  which  the  seat  was  suspended  freely,  designed  to  absorb  the  shock  of  turbulence.  The 
passenger's  seat  position  is  controlled  by  his  shift  of  weight,  since  his  C.G.  would  always  be  below  the 
hammock's  pivot  point  (794).  Other  types,  designed  for  cargo,  but  possible  for  seat  packaging  as  well, 
would  utilize  a net  system--a  net  attached  to  load  limiters  (attenuators),  or  an  inextensible  net  attached 
to  load  limiters  (793).  One  problem  with  shock-absorbing  or  energy-absorbing  devices  is  that  they  are 
usually  one-shot  devices.  Thus  in  cases  of  multiple  deceleration  peaks,  no  protection  may  be  offered  in 
the  second  jolt  and  the  occupant  may  also  be  in  a disadvantageous  forward  tilt  at  second  impact. 

Several  types  of  energy  absorbers  for  restraint  or  seating  systems,  acting  as  mechanical  load  limiting 
devices  which  attenuate  the  impact  by  yielding  or  tearing  of  metal,  have  been  tested  recently  on  an  impact 
sled  simulating  a crash  deceleration  using  anthropomorphic  dummies  and  cadaver  subjects  [Bergeman  and  King, 
1975  (795)].  These  devices  included  the  frangible  metal  tube  [McGhee,  1962  (801)],  Kroell’s  inverting 
tube  (799),  NASA's  curling  or  folding  tube  devices  (803),  and  a tearing  strip  absorber  designed  by  the 
University  of  Denver.  These  are  constant  load-deflection  absorbers,  or  load-limiting  devices  which  begin 
to  collapse  when  the  limit  is  reached.  It  was  found  by  Bergeman  and  King  in  tests  conducted  at  Wayne 
State  University,  that  if  the  absorber  collapses  25.4  cm  (10  in)  or  more,  a substantial  reduction  in  belt 
loads  and  occupant  head  acceleration  occurs.  Since  there  was  a hazard  in  the  fixed  load  energy  absorber 
bottoming  out,  a solution  proposed  was  to  use  a variable  load  energy  absorber,  and  the  steel  curling  type 
absorber  was  found  to  perform  most  reliably. 
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One  high  energy  absorption  system  called  TOR-SHOKS  has  been  developed  for  the  crashworthy  armored 
helicopter  seat  by  Aerospace  Research  Associates,  West  Covina,  California  for  the  U.S.  Army  and  Navy  Avia- 
tion Research  and  Development  Service  (800).  Each  seat  utilizes  a system  of  six  TOR-SHOK  energy  absorbers. 
Each  consists  of  a single  layer  coil  of  wire  captured  in  the  annular  space  between  two  cylinders.  The 
radial  clearance  between  the  concentric  cylinders  is  diminished  and  toleranced  so  that  the  wire  is  squeezed 
to  create  the  necessary  friction  force  to  roll  when  the  two  cylinders  are  loaded  with  opposing  forces. 

This  stroking  of  the  seat  bucket  allows  it  to  move  on  any  of  three  axes.  In  a Bell  Iroquois  UH-1  crash 
test,  a 48  G force  vertical  impact  at  a velocity  of  15.2  m/sec  (50  ft/sec)  was  reduced  to  20  G on  the  test 
seat  (800).  A major  study  by  Desjardins  and  Singley  (796)  reviewed  the  U.S.  Army's  crashworthy  helicopter 
seat  program,  and  outlined  various  alternative  energy  absorbing  devices  to  attain  a limit  load  factor  of 
14.5  +GZ.  One  conclusion  was  that  cushions  should  be  designed  as  shock  attenuators  using  rate  sensitive 
foams.  While  the  seating  needs  of  military  helicopter  crew  are  different  in  many  respects  from  those  of 
the  air  carrier  passenger,  much  of  the  current  state-of-the-art  research  in  seating  is  being  conducted  in 
this  area  and  should  provide  some  transfer  of  technology. 


4.6  Passive  Restraint  Systems 

Passive  restraint  systems  are  defined  as  systems  which  require  no  action  on  the  part  of  the  occupant 
to  activate.  Passive  systems  thus  are  completely  automatic,  and  while  such  systems  are  commonly  identi- 
fied with  inflatable  restraints  (air  bag  or  air  cushion),  net  "blanket,"  or  webbing  systems  may  also  be 
automatically  activated  during  an  impact  sequence.  There  have  been  a number  of  studies  of  passive  re- 
straint systems.  Phillips  [1973  (804,  805)]  conducted  a patent  and  literature  search  covering  the  period 
1967-1972,  which  resulted  in  identification  of  35  applicable  concepts,  to  which  additional  concepts  have 
been  added  in  Table  XVIII.  Some  65  versions  of  passive  restraints,  excluding  air  bag  concepts,  are  tabu- 
lated as  follows: 


TABLE  XVIII. 

PASSIVE  RESTRAINT  SYSTEM  CONCEPTS  (EXCLUDING  AIR  BAGS) 


Protective  Devices  with  Subclass 


Reference 


I . Passive  Belt  Systems 

1.  Rigid  bar  of  Rothschild 

2.  British  auto  restraint 

3.  Inertial  switch  system 

4.  Swinging  door  bar 

5.  Volvo  systems 

6.  Eight  configurations 

7.  Small  American  compact 

8.  American  safety  - Gremlin 

9.  American  safety  - belt  puller  attached  overhead 

10.  American  safety  - belt  puller  attached  in  seat 

11.  American  safety  - door  slide/roof  slide 

12.  Takata  - Sliding  arm 

13.  Takata  - Moving  buckle 

14.  Takata  - Slide  rail 

15.  Takata  - Flexible  arm 

16.  Vehicle  safety  belt  rigging 

17.  Volkswagen  ESV 

18.  Volkswagen  automatic  (VW-RA) 

19.  Ford  full  passive  belt 

20.  12  automatic  belt  systems/Post  Office  vehicles 
II . Passive  Net  Restraint 

1.  Nissan 

2.  Permanent  installation 

3.  Hamill  net  restraint 

III.  Inflatable  Belt  Systems 

1.  Self- fastening  inflatable 

2.  Allied  Inflataband 

3.  Tendon  supported  inflatable 

4.  Minicars  airbelt 
IV.  Transparent  Shields 

TT  "II"  inverted  oVer  occupant 

2.  Permanently  installed  shield 

3.  Inertia  switch  shield 

4.  Transparent  static  air  baq  shield 

V.  Blankets 

1.  Firestone  "Security  Blanket" 

2.  Flexible  blanket 

VI . Cushions 

1.  Static  airbag 

2.  Super-cushion 

3.  Nucon  Incorporated 

4.  Compartmentalized  air  bags 


Patent  No.  3,637,259  28  Jan  72  (804) 

Docket  69-7  Data,  1971 
A.M.  Brown,  1972  (804) 

Patent  No.  3,583,726  8 Jan  71  (804) 

Pi  1 hall  & Bohlin,  1972  (811) 
Johannessen  & Yates,  1972  (810) 
Bradford  et  al . , 1972  (807) 

Bradford  et  al . , 1972  (807) 

Bradford  et  al . , 1972  (807) 

Bradford  et  al.,  1972  (807) 

Docket  69-7  Data,  1971 

Docket  69-7  Data,  1971 

Docket  69-7  Data,  1971 

Docket  69-7  Data,  1971 

Patent  No.  3,506,083  14  Apr  70  (804) 

Smith  et  al . , 1 972 

Seiffert  et  al . , 1974  (814,  815) 

Hellriegel  & Rauthman,  1974  (809) 

Powell,  1968  (812);  Snyder,  1969  (785) 


Maki  et  al . , 1 970  (819) 

Patent  No.  3,525,535  25  Aug  70  (804) 


Patent  No.  3,414,326  3 Dec  68  (804) 

Allied  Data,  1972 
Docket  69-7  Data,  1972 
1975 

Patent  No.  3,663,037  16  May  72  (804) 

Patent  No.  3,643,972  22  Feb  72  (804) 

Docket  69-7  Data,  1972 
Sobkow  & Grenier,  1968 


Johannessen  & Yates,  1972  (810) 

Patent  No.  3,633,936  11  Jan  72  (804) 


Patent  No.  3,614,128  19  Oct  71  (Sobkow) 

Chrysler  Reports,  1971  (804) 

Nucon  Data-Patent  Pending,  1971  (804) 
Patent  No.  3,614,129  19  Oct  71  (Sobkow) 
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TABLE  XVIII  - Continued 
Protective  Devices  with  Subclass 


Reference 


VII . Arms  and  Barriers 

1 . Floating  arm 

2.  Fixed  arm-barrier  cushion 

3.  Overhead  arm 

4.  Complex  barrier  cushion 

5.  Automatic  crash  pad 

6.  Winged  bar 

7.  Roller-tape  arm 

8.  Inflatable  arms 

VIII.  Static/Capsule  Passive  Restraint 

1 . Seating  capsule 

2.  Ford  capsule 

IX.  Deployable  Head  Restraints 

1.  B.F.  Goodrich  prototype 

2.  Goodyear  airmat  prototype 

3.  HSRI/Uni royal  prototype 

X.  Integrated  Seat  Design 

1.  Integral  arms  about  torso 

2.  Protect-o-matic 

3.  Life-net  seat 

4.  Barrier  seat 

5.  Safety  seat 

6.  HSRI  Bucket  seat  with  airbag  torso  restraints 

7.  HSRI  Bucket  seat  with  Y-yoke  restraint 

8.  HSRI  Bucket  seat  with  automatic  3-point 

9.  HSRI  Triple  bucket/bench  modules 

10.  Ford  Techna 

1 1 . Pontiac  cockpit 

12.  Peugeot  deployable  wall  (panel) 

13.  Peugeot  deployable  wall  (seat) 

14.  Peugeot  deployable  wall  (seat/ cylinder) 


SAE  Paper  No.  720439  May 
Patent  No.  3,524,678  18 

Patent  No.  3,640,572  16 

Patent  No.  3,545,789  8 

Patent  No.  3,630,542  28 

Patent  No.  3,441,103  17 

Friedman  et  al . , 1 972 
Docket  69-7  Data,  1972 


1972 
Aug  70 
Dec  69 
Dec  70 
Dec  71 
Jul  67 


(804) 

(804) 

(804) 

(804) 

(804) 


Snyder,  1968  (1969)  (836) 
Egglestone  & Suthurst,  1974  (835) 


Hilyard  et  al . , 1973  (838) 
Hilyard  et  al . , 1973  (838) 
Hilyard  et  al . , 1973  (838) 


Patent  No.  3,623,768  30  Nov  71  (804) 

Docket  69-7  Data,  1972 
Patent  No.  3,591,232  6 Jul  71  (804) 

Patent  No.  3,556,585  19  Jan  71  (804) 

Patent  No.  3,409,326  5 Nov  68  (804) 

Robbins  et  al . , 1971  (784) 

Robbins  et  al.,  1971  (784) 

Robbins  et  al . , 1971  (784) 

Robbins  et  al . , 1971  (784) 

Snyder,  1969  (836) 

General  Motors  Corporation,  1 969 
Tarriere  et  al.,  1974  (921) 

Tarriere  et  al . , 1974  (921) 

Tarriere  et  al.,  1974  (921) 


Sources:  Phillips,  1973  (804,  805)  and  Snyder,  1976 

Undoubtedly  there  are  many  more  variations  or  concepts  which  are  proprietary  or  advanced  design  con- 
cepts and  have  not  been  published.  The  mass  of  literature  relative  to  restraint  systems  is  considerable, 
with  the  author  estimating  between  5,000  and  6,000  publications  in  his  personal  files  alone.  In  this  mono- 
graph no  attempt  will  be  made  to  describe  each  system  in  detail;  rather,  general  categories  as  tabulated 
in  Table  XVIII  and  specific  devices  or  concepts  believed  most  relevant  to  aircraft  application  will  be 
briefly  considered. 

4.6.1  Passive  Belt  Systems.  Various  automotive  manufacturers  and  suppliers  have  developed  and 
tested  automatic  belt  restraint  systems  which  would  conform  to  the  characteristics  which  would  be  required 
by  proposed  Federal  Motor  Vehicle  Safety  Standards  (FMVSS)  for  passive  restraints  in  automotive  vehicles 
manufactured  for  sale  in  the  U.S.  in  1977  (782).  Such  systems  have  been  proposed  as  an  alternative  to  in- 
flatable (air  bag)  systems,  and,  for  automobiles  at  least,  offer  the  advantage  of  proven  occupant  protec- 
tion by  means  of  a lap  belt  and  upper  torso  belt,  together  with  an  "automatic"  means  of  donning  the  system. 
Most  of  the  systems  developed  to  date  have  similarities.  One  significant  difference  is  between  geometries 
of  a belt  with  two  attachment  points  on  the  door  side  and  one  at  the  middle  of  the  car  (standard  arrange- 
ment), and  a belt  configuration  with  one  point  on  the  door  side  and  two  at  the  middle  of  the  car  (reversed 
belt).  Most  manufacturers  and  many  suppliers  have  conducted  research  on  the  passive  belt  system,  with 
most  recent  publications  including  work  by  AB  Volvo  (811),  Hamill  Division  of  Firestone  Tire  and  Rubber 
Company  (810),  American  Safety  Equipment  Corporation  (807),  Ford-werke  AG  Cologne  (809),  and  Takata  Kojyo 
Co.,  Ltd.  (817). 

One  of  the  most  successful  of  these  is  the  system  developed  by  researchers  at  Volkswagen  called  the 
"VW  Restraint  Automatic  (VW-RA)"  (813-815).  The  major  components  of  the  Volkswagen  system  consist  of  a 
diagonal  upper  torso  belt,  belt  retractor,  an  energy  absorbing  knee  bolster,  and  an  emergency  release. 

This  system  developed  from  Volkswagen's  Experimental  Safety  Vehicle  (ESV)  Program  at  Vol kswagenwerk  AG, 
Germany,  and  was  reported  in  detail  in  1974  by  Seiffert  et  al . (815). 

The  components  of  this  system  are  shown  in  Fig.  56.  The  upper  torso  belt  is  attached  at  one  end  to 

a release  latch  which  is  mounted  on  the  door.  The  other  end  of  the  belt  is  wound  around  the  retractor 
spool  on  the  central  tunnel  (between  the  seats).  The  D-ring,  which  is  mounted  on  the  seat,  guides  the 
webbing  from  the  retractor  around  the  seat  back,  and  assures  that  the  lower  anchor  point  does  not  change 
relative  to  the  occupant.  The  retractor  automatically  takes  up  any  slack  webbing  and  maintains  "gentle" 
tension  on  the  belt.  The  retractor  locks,  for  automotive  application,  at  a vehicle  acceleration  of  0.45  G. 

The  upper  end  of  the  torso  restraint  is  anchored  by  a tongue  in  the  emergency  release  hatch.  When 
the  door  is  closed,  the  belt  latch  engages  an  anchor  plate  which  is  bolted  to  the  normal  torso  belt  anchor 

point  of  the  B-pillar.  This  allows  the  belt  forces  during  a crash  to  be  transmitted  to  the  anchor  point 

rather  than  to  the  door  itself.  The  knee  restraint  is  a sheet  metal  frame  covered  with  energy  dissipating 
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foam  and  is  attached  below  the  instrument  panel.  Tnere  is  also  an  emergency  release  to  allow  separation 
of  the  belt  from  the  door  anchor  in  case  the  retractor  remains  locked  after  a crash.  In  this  system  the 
belt  automatically  is  positioned  on  the  occupant  (right  and  left  front  seats)  when  he  or  she  opens  the 
door,  seats  himself,  and  closes  the  door.  No  lap  belt  is  used  with  this  system,  only  the  single  upper 
torso  diaqonal  belt,  and  knee  cushion.  The  elimination  of  the  lap  belt  requirement  was  approved  by  the 
National  Highway  Traffic  Safety  Administration  in  Federal  Register  39  (81)  14594,  April  25,  1974  as  a re- 
sult of  a letter  by  Volkswagen  of  8 March,  1974  requesting  clarification  of  57.2(b)  of  FMVSS  208.  This 
system  is  currently  standard  equipment  on  1975  and  1976  Volkswagen  automotive  vehicles. 


Fig.  56.  VW  Automatic  Restraint  (VW-RA)  passive  system  as  developed  for  auto- 
motive vehicles  [Redrawn  after  Seiffert  et  al . , 1974  (815)]. 

This  system,  as  exemplified  by  the  VW-RA,  is  one  method  of  getting  the  occupant  to  wear  a restraint 
without  any  action  on  his  part.  However,  such  a system  would  obviously  present  serious  problems  of  donning 
for  present  airline  passenger  seat  configurations.  Further,  previous  tests  of  restraint  system  effective- 
ness conducted  at  Holloman  Air  Force  Base  [Snyder  et  al . , 1967  (708)]  have  indicated  that  a single  upper 
diagonal  torso  harness,  without  lap  belt,  allowed  the  subject  to  rotate  out  of  the  seat  with  fatal  in- 
juries in  the  tests  conducted.  In  the  confined  space  of  the  Volkswagen  vehicle  the  upper  diagonal  belt 
may  be  sufficient,  but  in  other  environments,  such  as  large  American  cars  or  aircraft,  such  a system  could 
present  hazardous  restraint  without  the  addition  of  lap  belts. 

Ford  Motor  Company  of  Germany  (Ford-werke  AG,  Cologne)  at  the  1974  5th  ESV  Conference  in  London,  pro- 
posed a "full  passive  safety  belt  system"  using  the  same  general  principle  as  Volkswagen,  but  with  some 
interesting  refinements  [Hellriegel  and  Rauthmann,  1974  (809)].  As  shown  in  Fig.  57,  this  system  features 
a "self-applying"  three-point  harness  (lap  belt  plus  single  upper  torso  diagonal  belt)  with  anchorage  to 
the  seat-frame  structure  and  seat-back  frame  in  the  area  of  the  headrest  and  door  sill.  An  inertia  reel 
(Ford  Pyro-Reel),  which  combines  functions  as  a webbing-retractor  and  load  limiting  inertia  reel,  is  loca- 
ted on  the  outboard  upper  seat. 


Fig.  57.  Schematic  of  a "full  passive  safety  belt  system"  designed  by 
Ford-werke  AG,  Cologne,  Germany  TRedrawn  after  Hellriegel  and  Rauthmann, 
1974  (809)]. 
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The  electronic  system  includes  a sensor,  seat-contact  switch,  ignition  interlock  (required  under  U S 
FMVSS  at  that  time,  but  since  rescinded  by  Congress),  and  non-function  alert  control.  The  belt  transport 
system  located  in  the  door  operates  automatically,  and  the  belt  has  an  emergency  release  at  the  door  sill 
and  seat  frame. 

The  electronic  impact  sensor  identifies  impact  by  G level  and  time  duration  and,  by  closinq  the 
electric  circuit,  activates  a propellant  charge  within  the  Pyro-Reel . Expanding  gas  in  the  Pyro-Reel 
causes  the  belt  webbing  to  wind  up  by  about  150  mm  (6  in),  so  that  the  seated  occupant  is  fully  tightened 

"is  Cn^r^lnt.at  8 mS  after  lmpact-  This  ^tem  has  been  tested  in  48km/h  (30mph)  barrier  impacts 
with  a 1974  Capri,  resulting  in  maximum  dummy  head  acceleration  of  31  G. 

Earlier  work  had  been  directed  at  solving  the  unique  restraint  problems  provided  by  U.S  Post  Office 
Department  postmen  who  may  operate  either  a 1/2  ton  right-hand  drive  vehicle,  a one-ton  parcel  delivery 
vehicle,  or  a 1/4  ton  three-wheel  cycle  vehicle,  and  in  some  combinations  must  be  able  to  drive  from  either 
a standing  or  seated  position.  All-American  Engineering  Company  of  Wilmington,  Delaware  completed  a study 
for  the  Post  Office  Department  which  included  over  a dozen  unique  designs  for  automatic  restraint  activa- 
tion by  post  office  drivers  [Powell,  1 g68  (812);  Snyder,  ig69  (785)]. 

In  the  sit  or  stand  hinged-arm  restraint  designed  for  a 1/2  ton  right-hand  drive  vehicle,  the  system 
is  activated  when  the  driver  gets  into  the  seat,  or  stands  in  position  and  pulls  the  restraint  bar  down  in 
3 Sln^6  fTl0"'  ^15  automatically  positions  a Y-belt  joined  at  the  mid-chest  in  a yoke,  which  is  attached 
over  the  left  seat  back  by  an  inertia-locking  reel.  In  a second  concept,  a ring  gate/shoulder  harness  de- 
vice considered  for  one  ton  parcel  delivery  trucks,  the  one-handed  operation  positions  both  the  circular 
lap  restraint  and  a diagonal  shoulder  harness  attached  to  an  inertia  reel.  A third  concept  utilizes  a 
swing  arm/full  harness  type  of  restraint  for  use  in  a 1/4  ton  three  wheeler.  The  system  can  be  positioned 
or  removed  easily  and  is  stored  by  overhead  bands,  allowing  it  to  swing  easily  into  position.  A fourth 
concept  features  a lap  plus  diagonal  restraint  which  swings  into  position  from  a single  point  attachment 
to  the  steering  column.  Other  advanced  techniques  investigated  to  solve  these  unique  restraint  problems 
included  automatic  magnetic  restraint  locks  built  into  clothing. 

None  of  these  concepts  or  devices,  however,  would  appear  directly  appropriate  to  requirements  for 
air  transport  passenger  application. 


Passive  Net  Systems.  Although  the  preponderance  of  research  and  development  in  passive  or 
automatic  restraint  systems  has  been  concerned  with  variations  of  its  inflatable  (air  bag)  system,  several 
i n7n^!?oi pass,!Ve  systems  have  been  designed  and  tested.  Both  Nissan  Motor  Company,  Ltd.  [Maki  et  al., 
19/0  and  Nairn  1 1 Manufacturing  Company  have  proposed  passive  net  restraint  systems  for  automobile 

occupant  protection.  General  Motors  has  also  conducted  work  in  this  area  but  published  data  are  not  known 
to  be  available.  Deployable  nets  have  both  advantages  and  disadvantages  when  compared  with  air  baqs  It 
should  also  be  noted  that  both  types  of  systems  require  the  use  of  a crash  sensor.  The  Nissan  system  is 
called  automatic  falling  occupant-protecti nq  net."  Operation  is  in  the  following  sequence: 

(1)  A G-sensor  is  actuated  by  the  shock  of  collision.  In  tests  this  setting  was  established  as  8 

G and  in  case  the  impact  is  a half  sine  pulse  and  the  peak  value  is  above  20  G,  the  time  delay 

between  the  onset  of  the  jolt  and  the  initiation  of  the  G sensor  is  9-10  msec. 

(2)  An  SCR  (silicon  controlled  rectifier,  2SF124)  control  circuit  is  activated,  supplying  electric 
current  to  solenoids  of  triggers.  The  SCR  is  used  to  supply  a current  of  approximately  150 
amps  to  the  solenoid  of  the  trigger  continuously. 

(3)  Plungers  of  solenoids  act  to  release  the  spring  lock.  The  triggering  device  consists  of  four 

triggers,  two  for  the  front  net  and  two  for  the  rear  net  in  the  automobile.  An  electric 

current  of  30  to  40  amps  sent  to  the  solenoid  releases  the  spring  locks,  the  force  of  the 
spring  pulls  the  rope,  and  the  net  is  stretched. 

A schematic  of  the  Nissan  system  is  shown  in  Fig.  58. 
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The  nets  tested  were  about  47  cm  (18.5  in)  wide  and  105  cm  (41  in)  long  (front  seat),  and  45  by  105 
cm  (17.5  by  41  in)  for  the  rear  seat  of  automobiles.  Each  upper  end  of  the  net  is  attached  to  the  roof 
structure  and  the  lower  ends  are  tensioned  by  the  nylon  rope.  The  rope  extends  from  the  spring  to  the 
lower  end  of  the  net,  has  a breaking  strength  of  700  kg  (1,543  lb),  and  is  made  of  3 nylon  strands  of 
.9  cm  (.4  in)  total  diameter. 

In  tests  the  net  was  reported  to  have  remained  intact  when  subjected  to  a 2000  kg  (4,410  lb)  force 
from  two  dummies.  The  fall  time  of  the  net  was  33-49  msec  (which  compares  to  approximately  40  msec  for 
the  air  bag  inflation  time).  8arrier  crash  tests  have  been  conducted  to  52  km/h  (32  mph),  with  a maximum 
car  acceleration  of  84  G,  with  a net  fall  time  of  37  msec.  A number  of  different  netting  materials  and 
configurations  have  been  tested. 

Net  material  is  highly  suitable  as  a restraint  material.  It  is  light  in  weight,  can  be  fabricated 
with  excellent  shock  energy  absorption  properties  and  is  sufficiently  strong.  In  the  automotive  applica- 
tion the  net  has  been  folded  inside  the  header  and  in  the  center  of  the  ceiling  and  covered  with  vinyl. 

Configurations  have  been  tested  involving  both  front  and  rear  seat  automobile  occupants  as  well  as 
the  driver.  Gross  body  motions  were  observed  to  be  arrested  but  certain  biomechanical  details  will  re- 
quire further  studies.  One  of  these  is  the  localized  loading  of  the  mesh  on  the  skin  of  the  occupant. 

Mesh  size  appears  to  be  an  important  variable  in  system  design.  Another  problem  is  the  observation  of  whip- 
lash as  occupant  motion  is  arrested.  It  appears  that  a net  must  be  designed  with  mechanical  properties 
which  vary  with  the  impinging  occupant  body  segment.  For  instance,  the  head  should  be  allowed  to  pene- 
trate the  net  to  a greater  extent  than  the  chest  at  a lower  load. 

The  "automatic  falling  occupant-protecting  net"  restraint  system  does  not  have  problems  with  noise 
or  pressure,  as  in  the  air  bag,  and  it  is  a simple  mechanism.  Following  solution  of  the  biomechanical 
problems,  this  system  should  be  at  least  as  competitive  as  air  bags  for  application  in  jet  transport  air- 
craft. However,  it  has  the  same  problem  as  air  bags  in  initial  sensor  crash  impact  detection.  Maki  et 
al . , 1970  (819)  should  be  referred  to  for  the  most  detailed  test  data  published  to  date.  As  of  March, 

1976,  no  further  advances  of  large-scale  testing  have  been  published. 


4.6.3  Inflatable  Belt  Systems.  Another  alternative  system  to  the  "air  bag"  passive  restraint  sys- 
tem has  been  de vel oped  by  Al lied  Chemi cal  Co.  (820).  The  Allied  Chemical  Inflataband™  consists  of  an  in- 
flatable three-point  harness  system  with  both  lap  belt  and  upper  torso  diagonal  belt.  The  system  is  com- 
prised of  four  major  assemblies  consisting  of  the  inflator,  the  buckle,  the  tongue  and  manifold,  and  the 
band  (including  both  lap  and  upper  torso  portions). 

Inflation  is  provided  by  a pressurized  gas  cylinder  housing  two  electroexplosive  devices.  When  an 
impact  condition  is  detected  by  the  sensor,  an  electrical  signal  is  generated  which  activates  the  squibs. 
The  activation  of  the  squibs  creates  sufficient  overpressure  of  the  stored  argon  gas  in  the  inflator  to 
rupture  a disk,  which  permits  gas  to  flow  through  the  ports  in  the  buckle  assembly  and  into  the  lap  and 
shoulder  segments.  At  full  inflation  the  shoulder  and  lap  band  segments  are  reported  to  be  approximately 
45.5  cm  (18  in)  in  circumference.  Fig.  59  shows  the  Inflataband  components. 


Fig.  59.  Exploded  view  of  Inflataband™  components  [Redrawn  after  Burkes 
et  al.,  1975  (820)]. 


This  system  combines  the  best  features  of  the  standard  belt  restraint  system  with  the  additional 
protection  of  the  inflatable  system  (Figs.  60  and  61),  except  that  while  the  system  is  automatically  acti- 
vated, it  is  not  a passive  system  from  the  viewpoint  that  the  wearer  has  to  take  action  to  don  it.  Once 
donned  it  then  functions  as  an  automatic  system.  One  advantage  is  that  should  the  inflation  system  fail, 
protection  is  still  afforded  by  the  locking  standard  restraint  function. 

This  system  could  be  more  easily  adapted  for  aircraft  use  than  other  advanced  systems  presented. 
However,  it  still  presents  a question  as  to  what  impact  levels  should  initiate  the  sensor,  for  both  crash 
impact  and  inflight  turbulence  conditions.  Other  questions  might  relate  to  potential  hazards  from  explo- 
sion of  overpressure  of  the  argon  gas  during  post-crash  fire,  and  potential  toxic  hazards.  Nevertheless, 
39  dynamic  sled  tests  utilizing  human  volunteer  subjects  recently  conducted  by  Burkes  et  al . [1975  (820)] 
at  Southwest  Research  Institute  with  prototype  Inflataband  restraints  demonstrated  promising  occupant 
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protection.  System  activation  occurred  at  18  to  20  msec  post-impact.  Impact  loads  were  effectively  dis- 
tributed over  the  chest  and  lower  abdomen  and  severity  indicators  were  below  injury  tolerances.  In  these 
tests  three  subjects  reported  stiff  or  sore  necks,  but  these  symptoms  were  transient. 


Fig.  60.  The  inactive  system  is  donned  as  a 
reqular  active  restraint  system  (Photo  courtesy 
Automotive  News) . 


Fig.  61.  Upon  initiation,  the  Inf  1 ataband™ 
system  inflates,  providing  additional  passive 
protection  to  the  occupant  (Photo  courtesy 
Automotive  News) . 


Under  contract  to  the  Department  of  Transportation,  National  Highway  Traffic  Safety  Administration, 
researchers  at  Minicars,  Gal  eta,  California,  have  designed  and  tested  an  airbelt  restraint  system  for  the 
subcompact  automotive  vehicle  which  reportedly  is  capable  of  protecting  the  restrained  occupant  in  frontal 
and  frontal  oblique  crashes  up  to  80.5  km/h  (50  mph).  This  system  was  intended  to  "retain  the  positive 
features  of  a belt  system,  such  as  its  rollover  protection,  lower  cost  (as  compared  to  air  bags),  and  mass 
production  features..."  [Fitzpatrick  and  Egbert,  1975  (821)]. 

The  airbelt  restraint  system  is  primarily  a two-point  or  three-point  belt  restraint  modified  to  in- 
flate upon  impact,  and  anchor  points  modified  to  provide  a controlled  yielding  in  the  system.  Inflation 
of  the  belt  is  advantageous  in  substantially  increasing  the  belt  contact  area  thereby  distributing  the 
load  over  greater  body  surface  area,  preventing  substantial  forward  head  movement,  and  automatically  taking 
all  belt  slack  out  of  the  system.  A three-point  belt  system  was  found  to  be  superior  to  the  two-point 
diagonal  torso  belt  as  the  latter  allowed  rotation  "almost  completely  out  of  the  restraint"  (p.3-3).  The 
energy-absorbing  belt  anchors  (force  limiters)  are  designed  to  attenuate  the  G levels  transmitted  to  the 
passenger.  This  system  is  schematically  illustrated  in  Fig.  62.  • 

At  this  time  additional  testing  is  needed  to  verify  performance  of  the  inflator  in  a variety  of  en- 
vironmental conditions,  to  assess  the  statistical  probability  of  reproducible  performance,  to  determine 
shelf  life,  and  to  design  a new  lightweight,  less  expensive,  non-reloadable  inflator  case. 

The  "air  bag"  portion  of  the  system  is  a section  76  cm  (30  in)  long  by  20  cm  (8  in)  in  diameter, 
constructed  of  two  layers  of  nylon  material,  which  inflates.  Along  two  sides  of  the  inflated  cylinder  are 
longitudinal  strips  of  conventional  seat  belt  webbing,  which  join  together  as  a double  layer  to  form  the 
lap  belt  and  connecting  webbing  to  the  upper  force  limiter  and  belt  anchor. 

A 1.6  cm  (5/8  in)  diameter  vent,  located  in  the  air  bag  portion  attenuates  rebound  by  dissipating  a 
portion  of  the  stored  compressive  energy  in  the  gas.  A diffuser  is  attached  to  the  inflator  inside  the 
bag,  and  is  designed  to  distribute  the  gas  to  various  areas  of  the  bag  in  order  to  prevent  a local  hot 
gas  jet  from  burning  a hole  in  the  bag.  The  diffuser  is  constructed  of  radiator  hose,  4.4  cm  (1-3/4  in) 
inside  diameter  and  42  cm  (16-1/2  in)  long  with  .9  cm  (3/8  in)  diameter  holes  punched  on  5.1  cm  (2  in) 
centers.  One  end  of  the  hose  fits  over  the  inflator  nozzles,  while  the  other  end  is  pinched  with  a rivet, 
forming  two  holes  in  the  end  of  the  tube. 

A pyrotechnic,  rather  than  a stored  gas,  inflator  was  selected.  Minicars  reasoned  that  a stored  gas 
system  is  prone  to  gas  leakage  (especially  at  316.6  kg/sq  cm  [4,500  psi]),  and  secondly  that  the  combined 
effect  of  the  inflator's  high  pressure  and  low  volume  make  the  flow  duration  of  a stored  gas  system  very 
short  (approximately  10  msec).  One  result  is  that  there  is  insufficient  gas  available  to  support  the  head 
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50-60  msec  post-crash.  On  the  other  hand,  the  pyrotechnic  system  reaches  its  maximum  rate  of  gas  flow 
later  in  the  event  when  the  gas  pressure  in  the  inflator  case  reaches  its  maximum  value  (approximately  40 
msec  after  squib  initiation).  The  inflator  is  10.2  cm  (4  in)  long  and  4.4  cm  (1-3/4  in)  in  diameter, 
and  contains  60  grams  (2  oz)  of  propellant. 

The  primary  energy  absorbers  in  the  restraint  system  are  the  force  limiters  located  at  each  of  the 
three  belt  anchor  positions.  The  roller  diameters  for  the  lap  belt  force  limiters  are  1.6  cm  (5/8  in), 
while  the  roller  diameters  for  the  upper  anchor  is  1.9  cm  (3/4  in).  The  lower  outboard  force  limiter 
must  react  to  both  the  force  transmitted  through  the  lower  part  of  the  torso  belt  as  well  as  a portion  of 
the  lap  belt  load. 


Fig.  62.  Minicars  Airbelt  Restraint  System  developed  under  NHTSA  contract  [Redrawn 
after  Fitzpatrick  and  Egbert,  1975  (821)]. 


The  airbelt  restraint  system  of  Minicars  as  well  as  the  Allied  Chemical  Inflataband  offer  some  im- 
portant advantages  over  conventional  belt  systems.  But  in  aircraft  use  the  total  seat/restraint  system 
must  be  considered,  and  to  be  of  benefit,  the  passenger  seat  would  have  to  be  modified  to  employ  upper 
torso  anchorage.  The  use  of  upper  torso  restraints  for  air  carrier  passengers  in  forward -fa ci ng  seats 
would  increase  impact  protection  (assuming  the  seat  was  redesigned  and  strengthened,  as  well  as  the  an- 
chorage strengthened).  However,  serious  questions  of  passenger  usage  and  acceptance  of  an  upper  torso 
harness  which  is  not  automatically  donned  must  be  considered,  especially  in  wide  body  airbus  configurations. 

4.6.4  Transparent  Shields.  At  least  three  concepts  have  been  patented  related  to  the  idea  of  pro- 
tecting automotive  vehicle  occupants  through  a device  which  surrounds  the  occupant  or  occupant  compartment. 
A 1972  patent  [Wohn-Machowski  (824)]  envisions  an  individual  being  protected  by  an  inverted  U-shaped  flex- 
ible transparent  shield,  anchored  to  the  ceiling  and  to  the  floor  attachment  points  of  the  seat  belt. 

Another  concept  [Calati  and  Lehle,  1972  (823)]  consists  of  a permanently  installed  flexible  transparent 
shield  between  the  roof  and  top  of  the  seat  or  instrument  panel.  In  contrast  to  the  first  concept,  this 
system  is  fully  passive  and  does  not  interfere  with  occupant  egress.  A third  fully  passive  system  con- 
sists of  an  inertial  switch  flexible  shield  stored  overhead,  but  pulled  into  position  by  pendulum  weights 
by  the  inertial  forces  generated  at  frontal  impact.  This  system  requires  no  power  sources  for  activation 
[Brown,  1972  (822)]  and  is  illustrated  in  Fig.  63.  However,  none  of  these  concepts  appear  too  practical 
when  considered  in  relation  to  other  advanced  systems  and  when  one  considers  that  they  have  not  been 
developed  or  tested.  The  flexible  shield  of  Wohn-Machowski,  for  example,  could  present  problems  in  post- 
crash emergency  escape,  would  be  difficult  to  make  comfortable  for  the  wearer  in  hot  environments  due  to 
little  air  circulation  area,  and  would  meet  with  certain  occupant  reluctance  to  be  so  enclosed,  whether 
it  be  in  an  automotive  vehicle  or  an  air  transport.  The  inertial  switch  concept  does  not  take  into  con- 
sideration protection  for  any  mode  but  frontal  collision. 

An  interesting  transparent  shield  restraint  was  conceived  and  developed  (and  a subsequent  device 
tested)  by  Sobkow  and  Grenier  in  early  Ford  Motor  Company  safety  concept  programs.  Designed  for  the  front 
seat  passengers  in  motor  vehicles,  this  restraint  device  consisted  of  an  outer  skin  of  transparent  plastic 
sheeting,  formed  by  four  ribs  with  two  end  pieces  to  maintain  shape  and  support.  It  was  contoured  to  ex- 
tend down  vertically  from  the  ceiling  to  the  passenger's  lap,  then  forward  horizontally  to  the  glove  box 
and  was  hinged  at  the  lower  part  of  the  instrument  panel.  The  forward  sheeting  extended  from  roof  contour 
down  the  line  of  the  windshield.  The  device  could  be  deflated  when  not  in  use.  It  reportedly  could  be 
inflated  in  20-40  seconds  when  the  passenger  initially  sat  in  the  vehicle  by  pressing  a button  which  acti- 
vated a small  air  motor  which  blew  up  the  transparent  bag  with  air.  At  the  end  of  a trip  it  could  be  de- 
flated by  the  same  motor,  through  a reverse  (vacuttm)  pump  sucking  the  air  out  again.  This  transparent 
static  air  bag  shield  was  designed  to  be  forward  of  the  passenger  with  only  a few  inches  of  space  between 
the  body  and  the  rear  portion  of  the  bag.  A later  (non-transparent)  version  of  this  concept  utilized  solid 
foam  with  encapsulated  air  bubbles  (U.S.  Rubber)  to  replace  the  air,  and  this  reportedly  performed  very 
well  in  dynamic  tests.  This  later  non-transparent  version,  when  inflated,  extended  vertically  to  approxi- 
mately eye  level  in  front  of  the  occupant,  so  that  there  was  forward  visibility  over  the  top  of  the  bag. 
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Fig.  63.  Inertia  switch  flexible  shield,  stored  overhead  but  swings 
into  place  during  impact  [Brown,  1972  (822)]. 

4.6.5  Blankets.  One  means  of  providing  restraint,  similar  to  nets  or  shields,  is  by  use  of  an 
automatically  activated  blanket.  The  Firestone  "Security  Blanket,"  proposed  principally  as  protection 
for  motor  vehicle  rear  seat  occupants,  consists  of  a blanket  secured  to  a belt  at  the  upper  portion.  This 
is  automatically  pulled  up  across  the  chest  during  an  impact,  keeping  the  occupant  from  being  thrown  for- 
ward (804,  810).  In  1972  Huber  was  granted  a patent  on  an  automatic  flexible  blanket  designed  for  the 
front  seat  vehicle  occupant  as  well  as  the  rear  occupant  (825).  This  device  contains  a support  beam  with 
the  blanket  to  restrain  the  torso  like  a lap  belt.  One  good  feature  about  this  category  of  restraint  con- 
cept is  that  it  acts  to  distribute  the  loading  over  a large  area  of  the  body.  It  has  not  been  seriously 
pursued  in  recent  years. 

4.6.6  Cushions . In  1971  Sobkow  at  Ford  Motor  Company  designed  a static  foam-filled  air  bag  which 
would  cushion  the  body  in  impact  (826).  This  restraint  device  consists  of  an  open-celled,  resiliently  de- 
formable foam  which  is  enclosed  in  an  air  bag  at  atmospheric  pressure.  At  impact  the  bag  is  pressurized 

in  proportion  to  occupant  displacement,  and  the  flow  out  of  the  bag  is  restricted  by  a valve.  A variation, 
involving  a super  cushioning  of  the  instrument  panel,  has  been  explored  by  Chrysler  Corporation  (804). 

4.6.7  Arms  and  Barriers.  Concepts  using  arms  or  barriers  for  occupant  protection  include  many 
variations.  Mini  cars,  Inc.  of  Galeta,  California  has  developed  a torso  restraint  roller-tape  mechanism 
that  is  designed  to  swing  into  place  as  the  door  is  closed  [Friedman,  1972  (829)].  This  work  was  done 
under  contract  to  the  National  Highway  Traffic  Safety  Administration.  The  bar  consists  of  a roller-tape 
device  that  is  designed  to  provide  a constant  force  loading  on  the  occupant's  chest  during  impact.  Five 
different  concepts  had  been  explored,  and  one  operational  device  constructed  and  subjected  to  14  impact 
tests  using  a Chevrolet  Nova  back.  Among  conclusions  from  these  tests  was  that  stroke  and  rebound  must 

be  handled  by  substantially  reducing  the  exit  velocity  from  the  restraint.  It  was  believed  that  the  occu- 
pant could  be  returned  to  his  or  her  original  seated  position  after  impact  by  providing  more  rebound  velo- 
city in  the  knee  restraint  than  in  the  chest  restraint.  Fig.  64  shows  one  of  two  energy  absorbing  pylon 
configurations  listed. 

Another  approach,  taken  by  Britax,  Ltd.,  U.K.,  consists  of  a cushioned  pad  resting  in  the  area  of 
the  upper  torso  that  produces  a constant  force  of  680  kg  (1,500  lb)  at  the  chest  pad,  and  a knee  restraint 
energy  absorber  which  exerts  a force  of  907  kg  (2,000  lb)  [Grime,  1972  (831)].  As  diagrammed  in  Fig.  65, 
this  system  is  claimed  to  be  effective  in  motor  vehicle  impacts  for  rollover,  frontal,  and  side  modes.  A 
prototype  has  been  used  in  a motor  vehicle,  and  occupant  response  indicates  there  is  ample  freedom  of 
shoulder  and  upper  body  movement.  The  major  feature  of  the  Britax  automatic  cushion  restraint  is  that  a 
pad  or  cushion  is  held  in  contact  with,  or  close  to,  the  chest  of  the  vehicle  occupant  at  all  times.  The 
pad  can  be  pushed  forward  against  light  spring  pressure  so  that  the  occupant  is  free  to  lean  forward.  At 
impact  the  arm  is  locked  by  a mechanism  sensitive  to  vehicle  deceleration.  The  lower  part  of  the  body  is 
decelerated  and  prevented  from  submarining  by  a knee  pad  placed  a short  distance  in  front  of  the  knees. 

Peugeot  of  Paris  has  also  developed  a fixed  arm  barrier  cushion  [DeLavenne,  1970  (827)].  An  over- 
head "vehicle  safety  guard"  concept  of  Doehler  [1969  (828)]  was  originally  conceived  as  an  active  restraint, 
requiring  the  occupant  to  swing  an  arm  pivoted  at  the  top  of  the  seat  into  place  in  front  of  the  chest.  A 
more  complex  technique  was  devised  by  Graham  [1970  (830)],  whose  concept  would  utilize  a number  of  protec- 
tive shields  that  are  stored  during  normal  use  of  the  vehicle  and  move  into  position  when  triggered  by  an 
impact.  Another  arm  concept  is  the  automatic  crash  pad  of  Wycech  [1971  (834)],  which  incorporates  a shock 
absorber  pad  which,  when  triggered  by  an  impact,  is  lowered  into  place  to  protect  the  upper  torso.  The 
Lymar  winged  bar  concept  consists  of  a bar  that  moves  from  the  vehicle  instrument  panel  to  restrain  the 
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lower  torso  [1967  (833)].  An  inflatable  system  with  flexible  configuration  restrains  the  shoulders  and 
lower  torso,  as  conceived  by  Kilronski  of  the  Naval  Underwater  Systems  Center  [1972  (832)].  These  systems, 
and  other  similar  concepts,  range  from  simply  ideas  to  those,  like  the  Britax  automatic  cushion  restraint, 
which  have  been  designed,  developed,  crash  tested,  and  tested  in  operational  use. 


Center  Passenger 
Frontal  Strike 


Fig.  64.  Minicars  Energy  Absorbing  Pylon  Restraint  configuration  [Friedman  et 
al.,  1972  (829)]. 


SlOE  VIEW 


Fig.  65.  Britax,  Ltd.  automatic  cushion  restraint  [Grime, 
1972  (831)]. 


4.6.8  Static/Capsule  Passive  Restraint.  Occupant  protection  can  also  be  achieved  by  encapsulating 
the  environment  about  the  seat  area  to  provide  energy  absorbing  contact  surfaces.  In  a concept  designed 
for  advanced  automotive  vehicles,  Snyder  suggested  a capsule  system  using  wrist-twist  steering  controls, 
which  had  been  extensively  developed  and  tested  by  both  General  Motors  Corporation  and  Ford  Motor  Company 
by  1968  [Snyder,  1969  (836)],  combined  with  a foam  energy-absorbing  forward  panel  and  deep  bucket  side 
and  head  protection  (Fig.  66).  Advanced  variations  of  this  "static  passive  restraint"  concept  have  been 
further  explored  by  Ford  of  England  [Egglestone  and  Suthurst,  1974  (835)],  as  reported  at  the  Fifth  Inter- 
national Conference  on  Experimental  Safety  Vehicles.  No  belts  or  other  body  contact  restraints  are  en- 
visioned with  such  a passive  capsule  environment. 
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Fiq . 66.  Concept  of  seatinq  capsule  with  protective  energy-absorbing  forward  panel. 
Removal  of  steerinq  assembly  would  allow  use  of  passive  restraint  concept  with  no 
occupant  belt  system  necessary.  High  sides  of  capsule  offer  side  impact  protection 
and  head  protection.  Capsule  could  swivel  to  enter,  or  outboard  section  could  be 
integrated  with  door  [Snyder,  1969  (836)]. 


4.6,9  Deployable  Head  Restraints.  Seating  head  restraint  protection  has  been  required  in  all  new 
automotive  vehicles  manufactured  for  sale  in  the  U.S.  since  1 January,  1969.  FMVSS  Standard  202  relative 
to  head  restraints  requires  that  during  a half-sine  acceleration  pulse  of  8-9.6  G amplitude  and  80-96  msec 
duration  the  rearward  rotation  of  the  head  relative  to  the  torso  should  be  limited  to  45  degrees  by  the 
action  of  the  head  restraint  (841).  The  two  most  common  forms  of  head  restraint  presently  in  use  in  motor 
vehicles  are:  (1)  a fixed  extension  of  the  seat  back,  providing  71  cm  (28  in)  height,  or  (2)  a separate 
head  cushion,  adjustable  for  height,  attached  to  the  seat  back.  However,  a number  of  other  variations  have 
been  developed  or  conceived,  including  net,  webbing,  and  harness  restraints  [Snyder,  1970  (792)].  Such 
systems  may  adversely  restrict  rearward  visibility  for  some  drivers  and,  if  not  properly  adjusted,  may  not 
provide  effective  protection. 

Linder  NHTSA  Contract  FH-1 1-7612  (1  July,  1970  - 30  June,  1971),  Melvin  and  McElhaney  at  the  Highway 
Safety  Research  Institute,  the  University  of  Michigan,  developed  and  tested  two  automatically  deploying 
head  restraint  systems.  One  of  these  was  an  inflating-bag  system  and  the  other  a rigid  sliding  panel  sys- 
tem. Advantages  which  they  reported  of  the  inflating-bag  over  the  rigid  system  included:  (1)  more  compact 

packaging,  (2)  lower  inertia  during  deployment,  (3)  greater  potential  for  contact-surface  shaping,  and  (4) 
ability  to  expand  fore  and  aft  while  deploying  vertically.  Problems  found  were  related  to  provision  for 
adequate  fore  and  aft  stiffness,  and  need  for  oblique  impact  protection  [Melvin  and  McElhaney,  1971  (839); 
Melvin  et  al.,  1971  (840)].  In  a follow-on  program,  also  contracted  by  NHTSA  (HS-031 -2-281 ) , further  de- 
velopment proceeded  [Hilyard  et  al . , 1973  (838)]. 

In  the  HSRI  studies,  three  prototype  systems  were  tested:  the  B.F.  Goodrich,  Goodyear  Airmat,  and 

HSRI/Uni Royal  deployable  head  restraints.  The  B.F.  Goodrich  prototype  system  consisted  of  a "curved  tube" 
structure  similar  in  construction  to  a segment  of  a fire  hose--aN  tube  of  rubber  bladder  material  enclosed 
within  a tubular  sheath  of  coarse-woven  abrasion-resistant  fabric.  Adjustable  cables  were  incorporated  to 
control  the  shape  and  curve  of  the  sheath  as  the  rubber  bladder  within  expanded  upon  inflation  to  .7  to  1.1 
kg/sq  cm  (10  to  15  psi).  Goodyear  Aerospace  "Airmat,"  a drop-weave  material  with  unusual  mechanical  proper- 
ties, was  also  considered.  This  fabric  is  woven  in  a three-dimensional  manner,  which,  when  sealed  or  coat- 
ed to  provide  an  air-tight  system,  results  in  a stiff  structure  which  would  not  require  external  mechanical 
support  in  a head  restraint.  The  third  system  tested,  and  that  found  most  promising,  was  a neoprene-coated 
nylon  bag  supplied  by  UniRoyal,  Inc.,  and  inflated  by  an  Olin  "Safe-T-Fl ate”  inflator  (838). 

The  HSRI/Uni Royal  deployable  head  restraint,  shown  in  Fig.  67  consisted  of  a coated  fabric  bag  of 
elliptical  cross-section,  25.4  cm  (10  in)  high,  20  cm  (8  in)  deep,  and  45.7  cm  (18  in)  high.  An  inlet 
port  for  the  Olin  inflator  (below  the  baseplate)  was  located  in  the  bottom  of  the  baseplate  and  bag.  A 
gas  generator  system  developed  by  Rocket  Research  Corporation  (Redmond,  Washington)  was  also  considered 
but  the  Olin  system  tested  was  selected.  To  provide  resistance  to  rearward  loading,  a fiberglass-reinforced 
vinyl  hood  45.7  cm  (18  in)  wide  was  fastened  to  the  front  and  rear  of  the  baseplate.  This  allowed  rear- 
ward loads  applied  to  the  hood/bag  to  be  transmitted  to  the  baseplate  and  seat  structure.  An  additional 
load-strap  was  sewn  across  the  top  rear  of  the  hood,  then  attached  at  its  ends  to  the  edges  of  the  seat 
pan. 

The  HSRI/Uni Royal  deployable  head  restraint  system  was  subjected  to  16  impact-sled  tests  simulating 
rear-end  collisions  of  32  km/h  (20  mph),  96.5  km/h  (60  mph),  and  129  km/h  (80  mph)  car  to  car  closing 
velocities,  or  velocity  changes  for  the  struck  vehicle  of  16,  48.3,  and  64.4  km/h  (10,  30,  and  40  mph), 
equivalent  to  10,  18,  and  40  G peak  sled  pulses.  Tests  were  conducted  on  the  HSRI  impact  sled  utilizing 
both  95th  percentile  male  (98.4  kg  [217  lb])  and  5th  percentile  female  (48.1  kg  [106  lb])  dummies.  Fig. 

68  illustrates  an  instrumented  test  dummy  and  prototype  HSRI/Uni Royal  deployable  head  restraint.  In  addi- 
tion, 4 vehicle  crash  tests  were  conducted  at  Dynamic  Science  in  Deer  Valley,  Arizona. 
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Fig.  67.  HSRI/UniRoyal  prototype  deployable  head 
restraint  basic  configuration  (Photo  courtesy  J. 
Melvin,  HSRI). 


Fig.  68.  Instrumented  dummy  and  prototype 
deployable  head  restraint  (Photo  courtesy 
J.  Melvin,  HSRI). 


It  was  found  that  the  deployable  head  restraint  effectively  reduces  head/neck  hyperextension  ("whip- 
lash") that  characterizes  rear-impact  kinematics.  Typical  performance  for  a 95th  percentile  male  durmy, 
lap  belted,  in  a 64  km/h  (40  mph)/32  G direct  rear  impact  was  32  msec  deployment  time,  maximum  head/neck 
extension  10-1/4°,  peak  head  A-P  acceleration  71  G,  with  moderate  ramping  and  rebound.  Storage  volume 
was  51  x 10  x 2.5  cm  (20  x 4 x 1 in).  Since  these  tests  of  deployable  head  restraints  were  primarily  a 
feasibility  study,  product  development  problems  of  packaging,  protection  from  the  elements,  crash  sensor 
integration,  etc.,  were  recognized  but  not  explored.  Tests  of  the  oblique  impact  and  out-of-position  occu- 
pant were  inconclusive.  Although  rear-end  collisions  in  aircraft  are  rare,  the  aircraft  passenger  may  be 
subjected  to  crashes  in  which  head  protection  is  needed.  Headrests  are  required  to  provide  adequate  crew 
protection  for  the  crash  environments  currently  specified  in  both  Army  and  Air  Force  crew  seat  design  cri- 
teria. Currently  proposed  Army  and  Air  Force  design  criteria  call  for  crashworthiness  at  impact  levels  up 
to  18  G in  the  lateral  direction  and  30  G in  the  longitudinal  direction  (MIL-S-58095) . The  velocities 
associated  with  these  G levels  are  9.1  m/sec  (30  ft/sec)  and  15.2  m/sec  (50  ft/sec)  respectively,  and  sig- 
nificantly exceed  the  conditions  known  to  be  tolerable  without  a headrest.  Injuries  in  USAF  helicopter 
accidents  to  both  crew  and  passengers  have  been  attributed  to  lack  of  head  restraint  protection  [Brinkley, 
1973  (837)].  The  deployable  head  restraint  concept  remains  a promising  solution. 

4.6.10  Integrated  Passive  Restraints.  In  Section  4.5.1  integrated  active  harness  restraint  systems 
were  discussed'  Many  of  those  systems  could  be  modified  to  become  passive;  however,  at  least  five  addi- 
tional concepts  and  devices  (using  mechanisms  other  than  belts)  may  be  classed  as  fully  passive  systems 
under  the  definition  of  requiring  no  occupant  action  to  don  or  activate  in  a crash.  These  include  the 
Protect-o-Matic  system  (or  Kinematic  Safety  Seat  system),  the  Life-net  Seat,  the  Integral  Arms  about  Torso 
concept,  the  Barrier  Seat,  and  the  Vehicular  Safety  Seat. 

The  Protect-o-Matic  system  is  a device  which  has  a tilting  seat  pan  and  back  that  pivot  to  cradle 
the  occupant  under  impact  conditions.  The  seat  rotates  to  orient  the  body  in  a more  inclined  position, 
with  the  buttocks  toward  the  front  of  the  vehicle.  A number  of  crash  tests  have  been  conducted  with  this 
automotive  system,  but  it  was  not  considered  by  the  major  manufacturers  to  be  as  reliable  as  seat  belts, 
especially  since  this  system  offered  virtually  no  protection  in  side  impact,  rear  impact,  or  roll-over. 

The  Vehicular  Safety  Seat  consists  of  functional  armrests  which  contain  inflatable  devices  that  were  de- 
signed to  cushion  the  upper  torso  while  the  structural  arms  enclose  the  lower  torso  about  the  waist.  This 
was  developed  at  and  patent  assigned  to  Stanford  Research  Institute  (No.  3,623,768)  by  E.L.  Capener  in 
1971  (843).  Two  devices  patented  by  L.B.  Simon,  a Life-net  Seat  and  a Barrier  Seat  are  not  known  to  have 
yet  been  developed  or  tested.  One  contains  a member  along  the  front  edge  of  the  seat  that  raises  the  leg 
and  places  the  body  in  a fetal  position  in  an  impact,  and  the  other  rotates  the  entire  seat  pan  forward 
and  upward  to  place  the  knees  against  the  chest  at  impact  (845,846).  A fifth  concept  for  an  integrated 
seat  design  features  integral  arms  that  are  placed  in  front  of  the  occupant  and  has  openings  in  the  seat 
back  and  pan  to  provide  suction  on  the  body  (844). 

Fig.  69  illustrates  yet  another  integrated  seat-restrai nt  concept  which  was  proposed  by  Robbins  et 
al . [1971  (784)]  in  a research  study  of  advanced  passive  restraint  systems  undertaken  for  the  National 
Highway  Traffic  Safety  Administration.  In  this  system  the  occupants  are  seated  in  specially  designed 
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seats  providing  head  restraint  and  some  side  restraint  integral  to  the  structure  itself.  Upon  impact  an 
air  bag  is  deployed  in  front  of  the  occupant  to  provide  forward  restraint.  For  airline  use  such  a system 
would  most  effectively  utilize  a lap  belt  in  addition  which  would  retain  an  occupant  in  situations  where 
turbulence  was  encountered  below  air  bag  deployable  impact  loads. 

A number  of  additional  devices  not  described  here  have  been  considered. 


AIR  BAG 


Fig.  69.  Integrated  seat-restraint  system 
with  air  bag  designed  in  University  of 
Michigan  HSRI  concepts  study  for  NHTSA 
[Robbins  et  al . , 1971  (784)J. 


None  of  these  concepts  or  devices  yet  appear  feasible  for  use  in  aircraft  when  compared  to  existing 
technigues,  and  when  other  factors  such  as  cost,  reliability,  maintainability,  human  factors,  and  protec- 
tive capability  are  considered. 

4.6.11  Inflatable  (Air  Bag)  Passive  Restraint  System.  A considerable  amount  of  research  effort  in 
recent  years  has  gone  into  development  of  inflatable  occupant  restraint  systems,  commonly  (but  technically 
erroneously),  called  "air  bags."  (Compressed  air  was  used  in  some  initial  tests,  hence  the  name  "air  bag," 
but  later  developments  have  used  other  gases.)  However,  while  most  people  consider  this  to  be  a new  de- 
velopment, its  roots  go  back  many  years.  Studies  of  occupant  protection  carried  out  before  the  early  1960's 
were  primarily  concerned  with  various  types  of  belt  systems.  In  the  majority  of  cases,  these  systems  were 
intended  for  use  by  aircraft  occupants.  Inflatable  restraint  systems  were  also  closely  associated  with 
aircraft  in  conceptual  development;  however,  almost  all  subsequent  development  has  been  for  proposed  auto- 
motive requirements . 

4.6.11.1  History  and  Background  of  Development.  Although  the  "air  cushion"  was  evolved  at 
least  by  1918  as  a seat  [Mosel y",  "1 9"1 8 (897) J ancT  used  in  Webster's  Schneider  Cup  winner  and  other  aircraft 
such  as  the  de  Havilland  Moth,  its  use  as  an  abdominal  support  was  suggested  in  1933  by  Wing  Commander 
Marshall  of  the  Royal  Air  Force,  who  devised  an  air  cushion  belt  for  acceleration  protection.  During  the 
1930's  the  U.S.  Naval  Air  Corps  experimented  extensively  with  self-inflating  air  bags  on  aircraft  wings 
for  the  purpose  of  providing  flotation  after  crash  landings  at  sea.  The  concept  was  dropped  before  World 
War  II,  but  continued  interest  in  this  technology  produced  rapidly  inflating  life  rafts  and  paragliders 
[Frey,  1970  (872)]. 

During  World  War  II  there  were  reports  of  use  of  premature  inflating  of  the  Mae  West  on  life  rafts 
prior  to  crash  landings  (888)  as  impact  protection  (one  of  the  author's  8-man  crew  did  this  during  a North 
American  [Mitchell]  B-25  crash  landing).  However,  use  of  a gaseous  inflatable  restraint  system  for  crash 
protection  may  date  from  the  work  of  Pekarek,  a Czechoslovakian  engineer  with  the  RAF,  who  devised  the 
"Pekarek  Safety  Cell"  in  1943-1944  (903-907;  872).  In  1952  Jordanoff  (880)  reported  a manually  triggered 
air  bag  restraint  system.  Hetrick  [1952  (876)]  and  later  Bertrand  (849)  in  1955  filed  for  a patent  on  an 
air  bag  filled  on  manual  switch  application  with  automatic  deflation  after  a time  delay.  In  1959  several 
restraint  systems  utilizing  air  inflation  were  proposed  to  the  Air  Force  by  Snyder  at  the  University  of 
Arizona  (916)  for  astronaut  protection,  but  a Chance-Vought  system  was  selected  for  development  [Snyder 
(792)].  An  air  bag  passenger  seat  was  proposed  by  Lamm  in  1961  (889).  During  the  past  25  years  there 
have  been  literally  hundreds  of  ideas  and  proposals  for  inflatable  restraint  systems. 

A proposal  for  a formal  air  bag  study  at  Ford  Motor  Company  was  dated  January,  1957,  following 
preliminary  studies  in  1956  [Kohn,  1957  (887)],  and  described  an  air  cushion  to  protect  the  front  seat 
passengers  from  windshield  impact,  a steering  wheel  mounted  air  cushion,  and  a combination  inflatable 
front  seat  head  restraint  and  rear  seat  passenger  cushion  [Frey,  1970  (872);  Kemmerer,  1967  (882)]. 

A pneumatic  life  raft  was  purchased  in  1957  and  evaluated.  It  was  found  that  the  package  was  too 
bulky  and  that  the  time  required  to  fill  the  bag  from  high-pressure  cylinders  was  too  great  to  protect 
vehicle  occupants  during  a crash  [Kemmerer,  1967  (882)].  In  1960  the  Vehicle  Safety  Section  at  Ford  pro- 
posed to  use  the  gas  from  a propellant  charge  to  inflate  a bag  [Daniel,  1960  (868)].  The  concept  of  an 
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air  bag  restraint  for  automotive  occupant  crash  protection  was  probably  first  initiated  at  General  Motors 
about  1958. 

During  the  early  1960's  the  concept  of  an  air  bag  ("airstop")  restraint  system  was  extensively  ex- 
plored by  Clark  and  Blechschmidt  at  the  Martin  Company  in  Baltimore  (850,  853-863;  Cooper  et  al . , 1963 
(864)].  Their  reports  should  be  referred  to  for  further  historical  background;  however,  in  contrast  to 
current  air  bag  technology,  these  early  tests  involved  pre-inflated  bags.  The  pre-inflated  Martin  Airstop 
system,  developed  by  Clark  and  Blechschmidt,  has  been  crash  tested  in  several  aircraft  crash  tests,  in- 
cluding the  FAA  crash  test  of  a Douglas  DC-7  transport  at  Av-Ser  Division,  Flight  Safety  Foundation,  Deer 
Valley,  Arizona  in  April,  1964  [Clark  and  Blechschmidt,  1966  (863)].  This  was  followed  by  a NASA  rear- 
facing seat  crash  test  of  a Beechcraft  C-45  into  a hill  at  129  km/h  (80  mph)  in  April,  1965,  and  a series 
of  10  forward- facing  crashes  carried  out  at  the  National  Aviation  Facilities  Experimental  Center  (NAFEC), 
Atlantic  City,  in  November,  1965,  at  impact  speeds  up  to  140  km/h  (87  mph)  into  snatch  wire  arresting 
gear.  Although  demonstrating  the  feasibility  of  the  system,  rebound  was  excessive,  and  in  air  transport 
use  these  prototype  bags  would  have  hindered  emergency  evacuation.  Clark  and  Blechschmidt  subsequently 
sought  means  to  remove  the  bag  once  it  was  deployed,  and  experimented  with  several  techniques  (coil  springs, 
elastic  bands,  vacuum  system)  to  automatically  roll  up  the  bags  into  the  seat  storage  compartments  (863). 
They  envisioned  transparent  bags  in  the  backs  of  airline  seats,  possibly  inflated  by  the  stewardess  acti- 
vating a switch  prior  to  every  takeoff  or  landing  as  part  of  the  normal  procedure,  rather  than  attempting 
to  inflate  them  just  prior  to  an  emergency.  These  early  aircraft  tests  have  been  more  recently  followed 
up  by  additional  FAA  tests,  and  a considerable  number  of  proprietary  studies  within  the  automotive  industry, 
with  impetus  from  the  National  Highway  Traffic  Safety  Administration's  proposed  FMVSS  requirements  (782). 

The  first  full-scale  testing  program  involving  living  test  subjects  (baboons)  restrained  by  air  bag 
systems  was  reported  by  Snyder  et  al . in  1967  (791)  in  FAA  studies  conducted  at  Holloman  AFB,  New  Mexico, 
in  cooperation  with  the  USAF.  The  level  of  protection  offered  by  the  air  bag  system  appeared  to  be  higher 
than  for  other  systems  evaluated  in  that  program.  Shortly  after  this  series  of  tests  was  reported,  Ford 
Motor  Company  and  Eaton,  Yale  and  Towne,  Inc.  collaborated  in  a report  presented  at  the  January,  1968  SAE 
Automotive  Engineering  Congress  held  in  Detroit  [Kemmerer  et  al.,  1968  (883,  884)].  The  feasibility  of 
concept,  systems  development,  performance  requirements  and  the  implication  of  producing  inflating  restraint 
systems  on  a large-scale  production  basis  were  discussed,  and  conclusions  were  drawn  such  as:  (1)  inflating 

restraint  systems  can  reduce  occupant  loadings;  (2)  energy  absorption  must  be  provided  to  prevent  excessive 
occupant  rebound  by  means  of  a bag  pressure  relief  system;  (3)  an  inflating  restraint  system  can  be  auto- 
matically activated  by  a crash  sensor  and  deployed  in  the  short  time  between  crash  initiation  and  the  second 
collision  of  the  occupant  with  the  vehicle  interior;  (4)  a parameter  study  is  needed  to  determine  system 
performance  as  occupant  size  is  varied;  (5)  an  operational  criterion  for  sensors  is  needed;  (6)  reliability 
must  be  demonstrated;  and,  (7)  the  effects  of  noise  should  be  investigated. 

In  1968,  a project  (Contract  No.  FH-11-6962)  was  initiated  at  the  Highway  Safety  Research  Institute 
under  contract  to  the  National  Highway  Traffic  Safety  Administration  of  the  U.S.  Department  of  Transporta- 
tion [Robbins  et  al . , 1971  (909)].  Part  of  this  project  was  to  conduct  a detailed  analysis  of  work  carried 
out  on  air  bag  restraint  systems  to  determine  their  feasibility,  and  the  remainder  was  to  conduct  an  ex- 
perimental impact  sled  test  program  involving  dummies  restrained  by  air  bags. 

In  the  spring  of  1969,  initial  impact  sled  tests  involving  pre-inflated  air  bags  restraining  50th 
percentile  male  dummies  were  carried  out  at  HSRI.  Rapidly  inflating  air  bags  were  in  use  for  all  sled 
tests  conducted  after  June,  1969.  By  the  end  of  that  month  the  system  had  been  tested  up  to  48  km/h  (30 
mph)  in  frontal  collisions  involving  dummies  both  restrained  and  unrestrained  by  supplemental  lap  belts 
(909).  Further  air  bag  development  research,  including  vehicle  crash  tests,  was  carried  out  by  Cornell 
Aeronautical  Laboratory,  under  NHTSA  contract  [1971  (866,  867)]. 

Extensive  activity  was  begun  in  government,  industry  and  independent  research  organizations  on  July 
1,  1969,  as  the  Secretary  of  Transportation  issued  an  Advance  Notice  of  Proposed  Rule  Making  on  inflatable 
occupant  restraint  systems.  At  an  open  meeting  sponsored  by  the  Department  of  Transportation,  the  great 
potential  for  these  systems  was  demonstrated,  as  well  as  potential  problems  such  as  danger  to  the  out-of- 
position occupant  and  the  danger  of  inadvertent  actuation  to  a child  passenger. 

During  the  winter  of  1969-70  the  importance  of  supplemental  knee  support  was  demonstrated  and  im- 
plemented in  hardware  both  by  a low-deploying,  knee-catching  air  bag  produced  by  General  Motors  Corporation 
(851),  and  by  an  energy-absorbing  lower  instrument  panel  developed  at  the  Highway  Safety  Research  Institute 
for  use  with  an  air  bag  deployed  from  an  automobile  upper  instrument  panel.  By  spring,  1970  successful 
tests  were  carried  out  at  HSRI  at  64  km/h  (40  mph)  impact  velocity  and  in  right  front  oblique  impact  (909). 

An  International  Automotive  Passive  Restraints  Conference  was  held  at  the  General  Motors  Proving 
Grounds  in  May,  1970  (899),  sponsored  by  the  North  Atlantic  Treaty  Organization,  and  hosted  jointly  by  the 
U.S.  Department  of  Transportation  and  the  U.S.  automobile  industry.  This  yielded  information  on  the  state- 
of-the-art  of  passive  restraints  up  to  that  date.  A wide  range  of  views  and  technical  data  were  presented 
by  representatives  from  government  and  industry.  This  document  and  National  Highway  Traffic  Safety  Ad- 
ministration Docket  No.  69-7  of  the  Department  of  Transportation  provided  the  most  comprehensive  published 
data  through  1970  (898). 

Since  the  1970  NATO  Conference,  technical  data  on  air  bag  restraints  have  been  featured  at  numerous 
meetings  and  conferences,  including  the  Stapp  Car  Conferences  held  at  San  Diego  in  1971  [Melvin  et  al . 

(840),  Martin  and  Romeo  (892)],  Detroit  in  1972  [Romeo  and  Rose  (910),  Patrick  et  al . (902)],  and  in  San 
Dieqo  in  1975  [Dejeammes  and  Quincy  (869)],  and  at  the  annual  SAE  Automotive  Conferences  in  Detroit  (873, 
875,  878,  883,  885,  914,  and  others).  The  American  Association  for  Automotive  Medicine  has  also  published 
air  bag  research  annually  [Yost,  1972  (1002),  1973  (1003);  Schmidt,  1972  (998),  Greer,  1973  (965);  Aldman 
et  al . , 1974  (847);  Smith  and  Moffatt,  1975  (915)]. 

In  1971  NAFEC,  Federal  Aviation  Administration,  Atlantic  City,  New  Jersey  put  out  a request  for  pro- 
posals (RFP-1-27)  for  an  engineering  research  study  to  develop  a concept  of  an  inflatable  restraint  system 
for  use  in  general  aviation  aircraft.  This  study  was  conducted  by  Beta  Industries,  Dayton,  Ohio  by  Carr 
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and  Phillips  who  investigated  inflatable  restraint  design  criteria  and  developed  an  air  bag  restraint  sys- 
tem for  use  in  a general  aviation  aircraft.  Although  they  concluded  that  significant  modifications  would 
be  necessary  to  the  seat  support  structure  and  seat  pan  to  provide  necessary  energy  absorption  characteris- 
tics for  attenuation  of  the  vertical  crash  load,  their  study  indicated  that  an  air  bag  system  could  fully 
protect  the  occupant  of  a general  aviation  aircraft  in  a crash  impact  [Carr  and  Phillips,  1973  (852)]. 

The  FAA  conducted  a test  of  a prototype  air  bag  system  at  the  NAFEC  facilities,  mounted  in  an  air- 
craft cabin  arrested  at  130  km/h  (81  mph).  In  comparison  with  a lap  belt-shoulder  harness  restraint  the 
air  bag  lessened  peak  loads  on  the  torso  but  resulted  in  an  initial  "violent"  rearward  head  acceleration 
as  the  bag  inflated.  Apparently  only  the  single  dynamic  test  was  conducted,  although  other  static  tests 
were  done.  This  work  was  reported  in  May,  1972  [Sonmers  (919)]. 

On  February  28,  1972,  the  final  report  was  published  which  had  been  prepared  for  the  Office  of  Science 
and  Technology,  Office  of  the  President,  entitled  Cumulative  Regulatory  Effects  on  the  Cost  of  Automotive 
Transportation,  or  the  "RECAT"  study.  This  study  presented  an  overview  relative  to  cost-effectiveness  and 
pointed  out  a number  of  concerns,  unsolved  as  of  that  date  (900,  1004). 

In  August,  1973  the  U.S.  Senate  Committee  on  Commerce  held  hearings  on  air  bag  development  and  tech- 
nology, the  Honorable  Vance  Hartke,  presiding,  which  again  brought  together  both  a large  amount  of  data 
and  conflicting  viewpoints  (865). 

On  May  22-25,  1972,  a 2nd  International  Conference  on  Passive  Restraints,  co-sponsored  by  the  Society 
of  Automotive  Engineers,  the  National  Highway  Traffic  Safety  Administration,  and  NATO,  was  held  in  Detroit, 
Michigan.  General  topics  covered  included  "Air  Cushion"  systems  development,  energy  sources,  crash  sen- 
sors, and  consumer  considerations,  as  well  as  discussions  of  system  effectiveness  and  passive  belt  systems. 
This  conference  represented  the  state-of-the-art  as  of  May,  1972  (917). 

A 3rd  International  Conference  on  Occupant  Protection  was  held  July  10-12,  1974  in  Troy,  Michigan, 
sponsored  by  the  Passenger  Protection  Committee  of  the  Society  of  Automotive  Engineers  (918).  However,  in 
contrast  to  the  29  papers  on  the  air  baq  given  at  the  1972  conference,  only  5 papers  concerned  with  air 
bag  studies  were  given  [Ross,  1974  (938);  Ikeda  et  al . , 1974  (933);  Shoemaker  and  Biss,  1974  (913);  Abe 
and  Satoh,  1974  (941);  Smith  et  al . , 1974  (972)]. 

On  May  19-23,  1975,  a five-day  public  meeting  was  held  in  Washington  on  the  subject  of  requirements 
for  occupant  crash  protection  under  FMVSS  208  [Occupant  Crash  Protection  - 49  CFR  571.208  (782)].  More 
than  40  representatives  of  suppliers,  the  auto  industry,  and  various  organizations  presented  data  relative 
to  passive  restraints.  Issues  were  emphasized  related  to  lead  time,  cost,  weight,  field  testing,  relia- 
bility, out-of-position  occupants,  public  acceptance,  retrofit,  test  dunmy  reproducibility,  and  relative 
effectiveness  of  air  bags  and  belt  systems.  National  Highway  Traffic  Safety  Administration  Motor  Vehicle 
Safety  Standard  No.  208  has  required  passenger  cars  manufactured  from  January  1,  1972  to  present  to  meet 
three  options  of  occupant  restraint,  the  first  of  which  involves  completely  passive  protection.  As  of  15 
August,  1977  it  has  been  proposed  that  such  passive  protection  be  made  mandatory,  although  now  such  a regu- 
latory action  seems  to  be  in  doubt.  Active  investigation  of  air  bag-equipped  motor  vehicles  has  been  under- 
way for  several  years,  with  some  air  bag-equipped  vehicles  reported  in  accidents  to  date.  As  of  10  March, 
1976,  there  has  been  no  decision  as  to  mandatory  imposition  by  the  National  Highway  Traffic  Safety  Ad- 
ministration of  requirements  for  passive  restraints  in  automobiles  manufactured  for  sale  in  the  United  States. 

Besides  the  active  developmental  work  being  conducted  in  the  automotive  industry  and  by  its  suppliers, 
several  organizations  have  been  funded  for  various  studies  by  NHTSA,  Department  of  Transportation.  Among 
these  are  the  Cornell  Aeronautical  Laboratories  (CALSPAN),  Wayne  State  University,  the  Daisy  Track  at 
Holloman  AFB,  Mini-Car,  Inc.,  Dynamic  Science,  Inc.,  Southwest  Research  Institute,  Beta  Industries,  Inc., 
and  Dynamic  Science  Division  of  Marshall  Industries. 

Inflatable  restraint  systems  have  been  applied  to  attenuate  lateral  (-Gy)  impact  for  Air  Force  crew 
escape  modules  such  as  the  General  Dynamics  F-lll  [Shaffer  and  Brinkley,  1974  (17)],  and  to  the  impact 
attenuator  bladders  of  the  USAF  B-l  bomber,  although  crew  restraint  in  each  is  a belt  system  utilizing  in- 
ertia reels  [Beers  et  al.,  1975  (848)].  To  date  no  studies  are  known  to  have  been  conducted  or  reported 
relative  to  the  air  bag  restraint  application  to  air  transport  passengers  since  the  early  1 960 ' s work  of 
Clark  and  Blechschmidt  (850,  853-862),  except  for  consideration  by  McDonnell  Douglas  of  an  inflatable 
application  on  the  back  seat  cushion  of  DC-10  seats  [Hawkins,  1974  (671)],  and  a prototype  DC-10  seat  back 
application  by  F.L.  Diamond  Co.  [1976  (1005)]. 

4.6.11.2  Inflating  Occupant  Restraint  System  Components.  There  are  six  basic  components  in 
an  air  bag  type  of  passive  restraint  s y s Vein".  ihese  consist  of:  (lj  crash  sensor-initiator,  (2)  energy 

(gas)  source  (stored  gas  and/or  solid  gas  generator) , (3)  valve  to  release  gas,  (4)  manifold  (to  distribute 
gas),  (5)  inflatable  bag,  and  (6)  malfunction  detector  and  system  readiness  monitor.  Each  of  these  sub- 
systems has  its  own  set  of  environmental  problems  and  components.  Although  the  vehicle  manufacturer,  as 
well  as  NHTSA,  is  concerned  with  the  total  system,  many  of  the  suppliers  concentrate  their  development 
efforts  on  one  or  more  components.  Fig.  70  illustrates  these  major  subsystems. 

The  subsystems  have  been  developed  for  automotive  use,  and  the  few  aircraft  tests  conducted  have 
utilized  or  adapted  from  these  components.  The  sensor-initiator  consists  of  an  inertial  switch  or  other 
device  capable  of  sensing  that  a crash  is  about  to  or  has  begun  to  occur.  The  signal  from  the  sensor  is 
then  fed  to  an  initiator  which  triggers  a supply  of  gas  to  the  deployable  bag.  In  the  case  of  pyrotechnic 
gas  sources,  the  initiator  is  an  igniter  whereas  for  the  stored  gas  systems,  the  initiator  is  an  explosive 
squib  which  fractures  a diaphragm  sealing  the  stored  gas  bottle.  In  all  cases  the  necessary  electrical 
signal  is  provided  by  a power  source  such  as  a battery,  although  a detonating  cord  has  been  proposed  by 
one  supplier. 

As  reviewed  in  Section  4.6.11.5,  several  types  of  energy  (gas)  sources  have  been  utilized  so  far, 
including  stored  gas,  chemical,  and  hybrid  types.  The  chemical  type  generates  the  inflation  gas  after 
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actuation  and  the  hybrid  combines  the  stored  gas  and  chemical  types.  The  most  commonly  used  Is  a bottle  of 
stored  air  or  nitrogen.  The  bottles  are,  of  course,  bulky  and  heavy,  weighing  up  to  9 kg  (20  lb)  in  the 
case  of  a single  right  front  automobile  occupant  restraint  system.  A second  gas  source  system  is  pyro- 
technic and,  because  of  the  solid  fuel  use,  is  much  lighter  and  compact.  However,  in  some  cases  the  gases 
may  present  toxic  problems.  A third  system  is  a hybrid  form  combining  the  two.  Most  often  this  consists 
of  a pyrotechnic  device  providing  rapid  inflation  supplemented  by  stored  gas  delivered  over  a specified 
period  to  provide  some  potential  for  protection  in  multiple  impacts.  Aspirator  systems,  representing  an 
extension  of  the  techniques  used  to  inflate  escape  slides,  have  also  been  developed. 
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Fig.  70.  Schematic  of  the  basic  driver  and  passenger  air  bag  restraint 
system. 


A variety  of  materials  have  been  proposed  for  the  inflating  cushion  itself.  Among  these  are  coated 
fabric  and  films.  Coated  fabrics  have  been  generally  selected  because  of  high  strength  and  favorable  weight. 
Fabrics  such  as  nylon,  dacron,  rayon,  glass  and  cotton  have  been  studied  with  nylon  most  commonly  used. 

Release  mechanisms  are  normally  electro-explosive  devices  (EED),  or  pyrotechnic  chains.  Mechanical 
devices  investigated  to  date  are  too  slow  for  this  purpose.  EED  considerations  reported  by  Jones  and 
McCarter,  1972  (935)  are  reliability,  fire/no-fire  energy,  and  Electro-Magnetic  Interference  (EMI)  immunity. 


4.6.11.3  Air  Bag  Design.  Air  bag  design  has  undergone  a number  of  changes  from  the  pre-in- 
flated  bag  systems  of  CTarF  and  Blechschmidt  to  the  current  more  sophisticated  systems.  Factors  which  must 
be  considered  in  the  design  include  bag  size,  bag  shape,  material,  use  of  vents,  and  other  special  require- 
ments, such  as  bags  with  high  and  low  deployment  capabilities.  The  size  or  volume  of  the  bags  which  have 
been  designed  for  automotive  use  depends  upon  the  occupant  position  in  the  vehicle.  A right  front  passenger 
air  bag  system  may  have  a volume  of  283  liters  to  410  liters  (10  to  14.5  cu  ft),  extending  laterally  from 
the  steering  wheel  to  the  door,  while  an  air  bag  designed  for  the  driver's  steering  wheel  may  have  a volume 
of  about  28  liters  (1  cu  ft)  in  a standard  size  vehicle.  In  a smaller  vehicle,  such  as  a Volkswagen,  the 
right  front  passenger  air  bag  volume  is  150  liters  (5.3  cu  ft),  while  the  driver's  air  bag  ranges  about  55 
to  68.5  liters  (2  to  2.5  cu  ft)  [Seiffert  and  Borenius,  1972  (912)]. 


Cal  span  has  developed  an  air  bag  on  collapsible  dashpanel  (ABCD)  passive  restraint  system  having  a 
total  bag  volume  (76  liters  [2.7  cu  ft])  approximately  one-half  that  of  the  conventional  standard-size 
right  front  passenger  system  [Shoemaker  and  Biss,  1974  (913)].  This  svstem  includes  a collapsible  dash- 
panel,  two  small  air  bags  which  deploy  at  speeds  above  32  km/h  (20  mph)  and  a crushable  kneebar  for  lower 
body  restraint.  Fig.  71  shows  general  types  of  air  bags  developed  for  automotive  use. 


SEPARATE  HEAD  AND  TORSO  BAGS 


Fig.  71.  General  types  of  air  bag  configurations  developed  for  automotive  use  [Seiffert 
and  Borenius,  1972  (912);  Shoemaker  and  Biss,  1974  (913)]. 
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In  a transport  aircraft  application,  the  back  of  the  seat  in  front  of  an  occupant  is  much  closer  than 
the  instrument  panel  and  windshield  would  be  in  front  of  a right  front  auto  occupant.  Because  of  this,  it 
is  likely  that  a bag  used  in  a jet  transport  could  be  smaller,  and  possibly  only  half  the  size  of  its  auto- 
motive counterpart. 

The  shape  and  deployment  of  the  bag  for  aircraft  use  would  be  governed  by  approximately  the  same 
principles  which  apply  to  automotive  use.  A bag  deploying  from  a position  in  front  of  the  occupant's 
knees  would  provide  a cushion  for  the  knees  and  torso  of  the  occupant.  A bag  deploying  at  chest  level 
from  a position  in  the  seat  back  in  front  of  the  occupant  would  have  to  be  supplemented  by  an  energy-ab- 
sorbing structure  designed  to  minimize  motion  of  the  legs.  Both  of  these  designs  have  been  tested  widely 
and  can  provide  equally  high  levels  of  protection.  The  high  deploying  bag  concept  has  slight  advantages 
in  that  the  bag  can  be  deployed  more  rapidly.  An  air  bag  system  mocked  up  for  general  aviation  aircraft 
use  at  HSRI,  the  University  of  Michigan  in  1970,  is  illustrated  in  Fig.  72. 


Fig.  72.  Mock-up  of  air  bag  system  for  light  aircraft  use  THSRI , 
The  University  of  Michigan,  1970]. 


Several  factors  have  governed  the  selection  of  fabric  bag  materials  as  a base  for  an  air  bag  rather 
than  film  material  [Streed  et  al . , 1971  (926)].  Among  these  are:  (1)  the  need  for  a high  strength-to- 
weight  ratio  for  the  material  due  to  the  necessity  for  the  use  of  as  thin  and  flexible  construction  of 
material  as  possible,  in  order  to  meet  compact  packaging  requirements,  (2)  the  necessity  for  this  construc- 
tion to  be  almost  insensitive  to  temperature  of  storage  and  deployment,  and  (3)  the  need  for  ultimate  re- 
liability as  to  resistance  to  snag  or  tear,  coupled  with  minimal  thickness  and  tear  resistance,  since  tear 
resistance  is  the  most  outstanding  property  of  a woven  fabric. 

Three  factors  govern  the  use  of  coatings  on  most  fabrics  which  have  been  chosen  for  application  in 
air  bags.  The  first  of  these  is  the  ability  to  control  the  gas  permeability  of  the  fabric.  Second,  a 
coating  serves  to  protect  the  fabric  and  occupant  from  heat  if  a pyrotechnic  inflation  device  is  used. 

Third,  a coating  on  the  fabric  permits  the  designer  more  flexibility  in  the  design  of  the  air  bag  since  it 
permits  him  to  obtain  seams  that  are  as  strong  as  the  fabric  itself  with  any  contour,  as  compared  to  the 
limitations  imposed  by  the  use  of  an  uncoated  fabric  with  its  need  for  sewn  or  adhesive  bonded  seams. 

Fabric  requirements  are  based  on  high  strength-to-weight  ratio,  maximum  elongation,  minimal  weight, 
temperature  insensitivity,  high  cover  factor,  and  capability  of  coating  by  conmercial  process.  Candidate 
materials  are  nylon,  dacron,  rayon,  glass  and  cotton.  Favorable  properties  seem  to  be  embodied  in  a 171 
gram  (5.5  oz)  ripstop  nylon. 

Human  volunteer  tests  conducted  by  the  USAF  at  Holloman  AFB  in  1971  for  the  NHTSA,  utilizing  early 
General  Motors  state-of-the-art  bags,  indicated  unacceptable  rebound  characteristics.  As  a result,  the 
air  cushion  fabric  was  modified  in  construction  and  shape  to  reduce  this  action.  It  was  also  found  that 
the  material  porosity  greatly  reduced  the  rebound  action,  and  eliminated  the  need  for  fabric  coatings. 

[Klove  and  Oglesby,  1972  (886)].  Controlled  porosity  was  accomplished  by  specifying  a tighter  weave  con- 
struction . 

Air  bag  systems  may  be  either  vented  or  unvented.  Generally  driver  bags  installed  in  the  steering 
column  are  unvented  whereas  the  right  front  passenger  systems  employ  venting  techniques.  One  of  the  main 
functions  of  a driver  bag  is  to  distribute  the  load  uniformly  over  the  chest.  Energy  can  be  absorbed  during 
collapse  of  the  energy-absorbing  column.  Passenger  bags  of  current  design  require  some  type  of  venting 
primarily  to  allow  energy  absorption  and  to  prevent  potentially  dangerous  rebound  of  the  occupant  into  the 
seat  back.  Present  venting  systems  consist  of  either  plastic  patches  which  blow  out,  allowing  gas  to  es- 
cape from  the  bag,  or  porous  panels  which  allow  the  gas  to  escape  through  the  bag  material  itself.  Both 
of  these  techniques  have  been  employed  in  passenger  bags.  No  large  differences  in  performance  have  been 
noted  when  a 50th  percentile  male  durmry  is  used  [Robbins  et  al.,  1971  (909)].  More  recent  woven,  uncoated 
fabrics  specified  utilize  a rip  or  tear  stop  construction.  This  inhibits  small  tears  from  developing  into 
large  openings. 
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4.6.11.4  Crash  Sensors.  The  purpose  of  a crash  sensor  is  to  predict  an  impending  impact  or 
to  determine  the  occurrence  of  a collision.  Crash  sensors  may  be  divided  into  three  general  categories: 

(1)  predictive  sensors,  which  activate  when  a crash  is  imminent,  (2)  impact  sensors,  which  activate  after 
the  crash  event  has  started,  and  (3)  combination  sensors,  of  which  a variety  of  types  have  been  developed 
and  tested.  Predictive  sensors  include  systems  employing  radar,  sonar,  laser,  or  infrared  techniques, 
while  predictive  mechanized  sensors  may  be  classed  as  passive,  active,  cooperative,  or  combinations.  Crash 
sensors  depend  upon  the  measurement  of  parameters  such  as  crush,  acceleration,  or  velocity  change. 

Several  locations  for  crash  sensors  in  automobiles  have  been  evaluated.  In  principle,  rapid  crash 
detection  can  be  achieved  by  placing  the  crash  detectors  at  the  vehicle  location  experiencing  earliest  de- 
celeration in  a crash,  or  the  point  of  initial  contact.  The  bumper  is  the  primary  vehicle  location  for  a 
frontal  crash.  Bumper  sensors  have  been  found  to  complete  crash  detection  in  6 msec,  but  this  time  can  be 
reduced  to  1 msec  or  2 msec  by  utilizing  a pressure  switch  monitoring  the  pressure  in  a hydraulic  shock 
absorber  [Pujdowski,  1972  (937)].  Due  to  bumper  height  mismatch  in  collisions,  additional  sensors  may  be 
mounted  in  parallel  on  the  firewall.  An  alternative  location  is  on  both  sides  of  the  radiator,  15.2  to 
25.4  cm  (6  to  10  in)  above  the  bumper.  At  present,  sensors  are  required  to  function  at  vehicle  impact  of 
48  km/h  (30  mph)  into  a barrier  at  angles  up  to  +30°  from  frontal,  although  the  lower  speed  at  which  the 
sensor  must  deploy  restraint  is  left  to  the  manufacturer. 

Depending  upon  the  particular  crash  sensor  scheme,  post-impact  sensors  utilize  from  5 msec  to  about 

2 msec  of  critical  post-impact  time  to  receive,  process,  and  transmit  crash  data  for  a 48  km/h  (30  mph) 
equivalent  fixed  barrier  impact.  However,  for  non-barrier  crashes  of  equivalent  severity,  longer  times 
may  be  required.  A crash  sensor  must  make  a crash/non-crash  determination  with  an  extremely  high  degree 
of  certainty.  Failure,  or  "inadvertence,"  has  been  determined  to  result  from  two  principal  causes.  The 
first  is  the  mobility  of  a sensor  to  "operate  precisely  at  the  minimum  threshold  and  not  to  operate  below 
that  minimum  threshold  during  frontal  impacts  that  occur  within  the  angular  zone  of  protection"  [Jones 

et  al.,  1972  (934)].  The  second  cause  of  inadvertence  relates  to  the  translation  of  large  rough-road  ver- 
tical accelerations  into  horizontal  accelerations  which  exceed  the  minimum  threshold  of  the  sensor.  As  a 
result  of  these  problems,  the  anticipatory  systems,  such  as  radar,  have  evolved.  However,  the  predictive 
sensor  system  can  also  mistakenly  identify  safe  objects  as  being  dangerous  and  result  in  an  inadvertent 
triggering  of  the  system. 

In  current  systems  of  crash  sensing  two  separate  devices  may  be  utilized  to  signal  the  energy  source 
of  collision  conditions.  A bumper-mounted  switch  will  operate  early  in  the  collision  sequence.  If  the 
collision  is  of  sufficient  level,  a portion  of  the  deployment-restraint  energy  for  the  passenger’s  system 
is  released.  At  low  levels  of  impact  no  deployment  of  the  driver’s  air  bag  (steering  wheel,  knee  bags)  is 
planned,  to  allow  maximum  control  in  low  speed  collisions.  A sensor  mounted  in  the  passenger's  compart- 
ment will  also  provide  a signal  to  the  passenger’s  system,  deploying  the  right  front  passenger  air  bag. 

This  latter  system  also  is  intended  to  operate  for  accident  cases  not  involving  the  bumper,  such  as  angular 
collisions.  If  a collision  is  of  sufficient  magnitude  above  the  bumper-mounted  and  low  level  deceleration 
detector  thresholds,  another  deceleration  detector,  such  as  the  radiator-or  firewall -mounted  device  will 
be  most  effective. 

Air  bag  requirements  for  motor  vehicles  vary  both  with  the  occupant's  position  and  vehicle  decelera- 
tion. In  a low  speed  impact  the  right  front  seated  passenger  requires  a relatively  slow  cushion  deploy- 
ment, reducing  noise  level  and  hazard  due  to  air  bag  deployment  velocity  contacting  him.  Low  speed  infla- 
tion is  also  desirable  for  the  standing  child  or  out-of-position  occupant.  In  a high  speed  impact,  rapid 
inflation  is  required  to  provide  optimal  protection.  On  the  other  hand,  the  driver  absorbs  energy  in  im- 
pacting the  energy  absorbing  column,  and  may  not  require  inflation  at  low  speeds.  In  a typical  automotive 
barrier  crash  at  48  km/h  (30  mph)  where  bumper  contact  occurs  at  0 msec,  the  sensor  would  trigger  the  sys- 
tem at  30  msec,  the  air  bag  would  deploy  at  57  msec,  the  forward  motion  of  the  occupant  would  be  arrested 
at  95  msec,  and  the  forward  motion  of  the  vehicle  stopped  at  115  msec.  This  sequence  is  shown  in  Fig.  73 
which  shows  an  anthropomorphic  dummy  simulating  deceleration  and  kinematics  of  an  unbelted  50th  percentile 
adult  male  in  an  HSRI  sled  test  at  32  km/h  (20  mph)  velocity.  The  first  frame  shows  initial  bag  deploy- 
ment, and  subsequent  sequences  show  the  forward  motion  of  the  dummy  into  the  deploying  bag  (with  concurrent 
venting  of  the  gas),  and  finally  rebound  back  into  the  seat.  In  standard  size  vehicles  some  50  to  60  msec 
elapses  from  contact  to  full  air  bag  inflation  at  48  km/h  (30  mph).  Sensor  activation  varies  somewhat 
between  manufacturers,  the  Volkswagen  Type  I Beetle  for  example,  having  a crash  threshold  for  sensor  acti- 
vation of  25  km/h  (16  mph)  for  the  "must-fire”  condition,  and  20  km/h  (12  mph)  for  the  "no-fire"  condition 
[Seiffert  and  Borenius,  1972  (912)]. 

Two  types  of  systems  are  used,  a single  level  system  which  activates  at  a low  level  19-29  km/h 
(12-18  mph),  and  a two  level  system  utilizing  2 gas  generators  at  higher  impact  velocities.  A typical  time 
sequence  for  a single  level  system  (at  48  km/h)  is  20  msec  to  sense,  2 msec  to  activate,  3 msec  for  distri- 
bution, and  30  msec  for  bag  inflation,  for  a total  of  55  msec.  For  a bumper  activated  system  5 msec  are 
required  to  sense,  2 msec  to  activate,  3 msec  to  distribute,  and  45  msec  to  inflate  the  bag.  In  comparison, 
a typical  time  budget  for  a 20  km/h  (12  mph)  low  level  impact  system  is  30  msec  to  sense,  2 msec  to  activate, 

3 msec  to  distribute,  and  60  msec  to  inflate  the  bag,  requiring  a total  of  95  msec  [Jones  and  McCarter, 

1972  (936)]. 

Requirements  of  a crash  sensor  can  be  related  to  performance,  reliability,  and  economic  factors. 
Performance  requirements  include  factors  of  operating  time,  threshold  capability,  and  directional  capabili- 
ty. In  considering  reliability,  the  most  important  factors  (for  automotive  use)  are  inadvertent  activation, 
failure  to  operate,  and  crash/non-crash  discrimination.  Economic  factors  include  maintenance  frequency, 
malfunction  indication,  and  cost.  Table  XIX  summarizes  crash  sensor  requirements  for  automotive  vehicles 
according  to  relative  importance  by  parameters  of  performance,  reliability,  and  economic  factors,  with 
values  assigned  by  Jones  and  McCarter  in  General  Motors  studies  (934-936). 


95 


Fig.  73.  Unbelted  50th  percentile  adult  male  dummy  in  HSRI  sled  deceleration  at  32  km/h  (20  mph) 
impact  velocity,  showing  initial  bag  deployment,  forward  motion  of  the  dummy  into  the  deploying 
bag,  and  finally  rebound  back  into  the  seat. 


TABLE  XIX. 

CRASH  SENSOR  PERFORMANCE  FACTORS 


Category 

Level  of 
Importance 

PERFORMANCE  (31%) 

RELIABILITY  (41%) 

ECONOMIC  (28%) 

AT 

Each  Characteristic 
Rated  at  6% 

Threshold  Tolerance 
Directional  Capability 
Operating  Time 

Inadvertence 
Operation  in  Crash 
Non-Crash  Discrimination 
Positive  Fire  Mechanism 
Withstand  Car  Environment 

Development  Status 
Cost 

Maintenance  Frequency 

(66%) 

(18%) 

(30%) 

(18%) 

tn 

Each  Characteristic 
Rated  at  3% 

Dynamic  Range 
Deacti vatable 
Selectable  Location 

Li  fe 

Movement  Below  Threshold 
Malfunction  Detection 

Producibi 1 ity 
Interchangeabi 1 i ty 

(24%) 

(9%) 

(9%) 

(6%) 

C: 

Each  Characteristic 
Rated  at  2% 

Status  Indication 
Compatible  with  Initiator 

Ability  to  Test-fire  and 
Rearm 

Si  ze 
Power 

(10%) 

(4%) 

(2%) 

(4%) 

Source:  Jones  and  McCarter,  1972  (935) 


These  criteria  of  performance,  reliability,  and  economic  factors  have  also  been  evaluated  in  terms 
of  various  characteristics  required.  As  related  to  performance,  operating  time  must  be  short  enough  to 
allow  air  bag  inflation  for  occupant  protection,  threshold  tolerance  includes  measurement  of  closing  velo- 
city and  of  target  density  to  indicate  significant  impact,  target  density  determination,  and  directional 
capability.  Reliability  relates  primarily  to  inadvertence  and  operation  in  a crash,  and  non-crash  dis- 
crimination. Finally,  maintenance  frequency  and  malfunction  detection  system  as  related  to  economic  fac- 
tors must  be  considered.  Table  XX  presents  crash  sensor  characteristics  as  evaluated  by  Jones  & McCarter. 
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TABLE  XX. 

CRASH  SENSOR  CHARACTERISTIC  PROFICIENCY  EVALUATION 


Category 

Proficiency 

Characteristic 

Excellent 

Good 

Acceptable 

Performance 

30  mph  Berner 
Operating  Time 

< 5 MS 

5 to  15  MS 

15  to  25  MS 

Closing  Velocity 
Meesurement 

± 1 mph  (1.6  Kmph) 

t 2mph  (3.2  Kmph) 

± 2.5  mph  (4.0  Kmph) 

Target  Density 

Detect  several 
critical  levels 

Distinguish  critical 
from  non-critical 

Auxilary  detector 
required 

Directions  Capability 

Frontal  30°,lateral, 
rollover  & rear 

Frontal  30°,  lateral 
& rollover 

Frontal  30° 

Reliability 

Crash  non  operating 
per  10,000  accidents/year 

<<  1.0 

< 1.0 

1.0 

The  advertent  Operation 
per  106  vehicles/year 

« 1.0 

< 1.0 

1.0 

Non  Crash  Discrimination 
Barrier  Speed 

1 mph  (1.6  Kmph)  lower 
threshold  definition 

2mph  (3.2  Kmph)  lower 
threshold  definition 

2.5  mph  (4.0  Kmph)  lower 
threshold  definition 

Restoration  time 

zero 

10  MS 

20MS 

Economic 

Maintenance 

none  required 

3 year  inspection 

Same  as  other  elements 

Melfunction 

Detection 

Fail  Safe,  monitor 
critical  elements, 
alarm  & seif  test 

Fail  Safe,  monitor 
critical  elements 
& alarm 

Meet  current 

MVSS208 

requirements 

Three  commercially  available  crash  sensors  were  evaluated  in  1971  by  Robbins  et  al . (909)  at  HSRI, 
the  University  of  Michigan.  These  included  the  early  Eaton  Autoceptor,  the  General  Motors  Delco  Elec- 
tronics Mechanical  crash  sensor,  and  the  Delco  Electronics  Safety  Sentinel. 

The  Eaton  Autoceptor  crash  sensor  is  a uniaxial  mechanical  spring-mass  system  which  fires  when  the 
mass  is  displaced  in  a predetermined  distance.  The  spring  holds  the  mass  against  an  end  of  the  sensor  in 
order  to  produce  a bias  force  against  the  mass.  This  first-generation  Eaton  spring  mass  sensor  (Fig.  74 
was  designed  for  the  following  characteristics:  1.3  cm  (0.5  in)  travel,  5 G preload,  and  2 G/in  spring 

rate.  To  1972  some  3 million  miles  of  road  tests  without  inadvertent  activation  were  reported  by  Eaton 
[Pujdowski , 1972  (937)]. 


MOVABLE  CONTACT 


PROTECTIVE  COVER 


SEISMIC  MASS 


Fig.  74.  Eaton  Autoceptor  first-generation  crash  sensor  [Pujdowski,  1972  (937)]. 
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The  Del co  Electronics  Mechanical  Crash  Sensor  Model  8-1000  is  a ball  sear  type  mechanism  fired  by 
displacement  of  a mass  which  is  restrained  by  magnetic  force.  The  sensor  is  essentially  omni-directional 
in  a plane  and  nominally  set  to  trigger  on  an  11  G,  80  msec  haversine  shock  wave  which  is  a rough  repre- 
sentation of  an  average  rear  end  automobile  collision. 

The  Delco  Electronics  Safety  Sentinel  4 Electronic  Crash  Sensor  is  omni-directional  in  a plane.  It 
consists  of  a ball  restrained  by  magnetic  force.  A ring  surrounds  the  ball  which  can  be  displaced  by  de- 
celeration until  it  contacts  the  ring,  thereby  energizing  the  firing  switch.  The  system  is  double  redun- 
dant, self-diagnostic  and  is  set  (at  delivery)  to  trigger  on  a 16  G,  60  msec  haversine  shock  wave. 

In  the  Eaton  and  GM  sensors  tested  at  HSRI,  each  of  the  sensors  was  mounted  on  the  ram  of  a Plaste- 
chon  high  speed  universal  testing  machine.  This  hydraul ically  actuated,  electronically  servo-controlled 
machine  was  programmed  to  subject  the  sensors  to  a variety  of  acceleration-time  profiles.  A Setra  Model 
110  accelerometer  was  mounted  on  the  ram  to  measure  the  acceleration  input  to  the  sensor.  The  accelero- 
meter output  was  filtered  through  a Burr-Brown  filter  meeting  SAE  J211  channel  class  180  specifications. 
An  automobile  12-volt  battery  was  the  power  source  for  the  sensors.  Typical  results  are  shown  in  Fig. 75. 
It  should  be  noted  that  for  these  30  G pulses  typical  of  the  initial  sheet  metal  crush  in  a motor  vehicle 
barrier  crash,  the  air  bag  would  have  been  triggered  in  from  10  to  14  msec. 

50 
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Fig.  75.  Crash  sensor  response  tests  [Robbins  et  al . , 1971  (909)]. 


Tests  were  performed  on  the  Eaton  sensor  to  establish  the  effect  of  off-axis  acceleration  on  trigger 
time.  Two  different  amplitude  (11  G peak  and  24  G peak)  acceleration-time  profiles  were  used.  The  sensor 
was  subjected  to  the  same  pulse  each  time  at  angular  increments  of  10  off-axis  starting  at  0 and  increasing 
until  the  sensor  would  not  trigger.  For  the  11  G pulse,  the  G-switch  triggered  at  24  msec.  At  20°  off 
center,  the  triggering  was  delayed  at  33  msec  and  the  sensor  would  not  trigger  for  larger  off-axis  angles. 
In  the  case  of  the  24  G pulses,  the  sensor  triggered  at  15  msec  for  a direct  frontal  pulse.  This  was  de- 
layed to  20  msec  for  a 30°  oblique  pulse.  The  system  did  not  fire  for  larger  angles  (See  Fig.  76). 

These  results  lead  to  two  observations  which  may  be  made  concerning  sensing  an  aircraft  transport  G- 
pulse.  First,  the  pulse  is  not  estimated  to  be  unidirectional  along  the  longitudinal  axis  of  the  aircraft. 
Rather,  both  horizontal  and  vertical  components  of  the  impact  will  be  present.  The  vertical  component  may 
be  as  great  or  even  greater  than  the  horizontal  component  in  some  cases.  Second,  a unidirectional  sensor 
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which  is  used  for  sensing  one  component  of  an  aircraft  impact  must  not  be  sensitive  in  its  operations  to 
accelerations  in  directions  other  than  the  direction  of  its  axis.  The  Eaton  sensor,  for  example,  could 
possibly  "stick"  due  to  friction  when  impacted  from  the  side.  Omnidirectional  sensors  would  be  necessary 
for  use  in  an  aircraft  crash  incident. 

The  sensors  tested  at  HSRI  can  be  modified  to  fit  a range  of  different  crash  pulses.  Thus,  it  is 
possible  that  current  designs  could  be  modified  for  Air  Force  application.  This  could  be  done  by  modifying 
the  G bias.  In  the  Eaton  system,  this  would  require  stiffening  or  softening  the  spring  element  to  either 
increase  or  decrease  the  bias.  It  would  be  necessary  to  modify  the  magnetic  characteristics  in  the  GM 
systems.  The  mass  displacement  limit  is  also  variable  in  the  various  cases.  This  would  affect  the  time 
duration  of  the  G-pulse  required  to  trigger  the  bag  inflation. 

All  of  the  commercial  sensors  evaluated  were  of  basically  simple  design  although  the  Delco  sensors 
had  sophisticated  electronic  components  associated  with  them.  The  sensors  were  potted  in  tough  plastic 
and  hermetically  sealed  to  such  an  extent  that  the  effects  of  environment  and  tampering  on  the  basic  sen- 
sor components  are  minimal. 

A more  recent  crash-active  type  of  sensor  is  the  wide  angle  crash  sensor  developed  by  Eaton  as 
shown  in  Fig.  76. 


While  inertial  sensors,  typified  by  the  spring  mass  and  the  magnet  types,  are  relatively  simple,  in- 
expensive, may  have  a wide  angle  sensing  capability,  and  are  easily  mounted  in  a number  of  locations,  pre- 
dictive sensors  have  many  advantages.  Table  XXI  provides  a summary  of  acoustic  (ultrasonic,  sonic),  opti- 
cal (laser,  infrared),  radar  (microwave),  radar-impact  switch  combination,  proximity  (capacitive,  inductive), 
mechanically-extended  probes,  and  electro-mechanical  (inertial)  comparisons. 

A sophisticated  sensor  has  been  developed  by  Toyota  which  calculates  and  predicts  the  collision  be- 
fore it  occurs  by  sensing  relative  speed  and  distance  between  the  car  and  the  object  of  the  collision. 

The  sensor  includes  an  oscillator,  circulator,  detector,  amplifier,  and  computer.  A microwave  is  continual- 
ly emitted  which  can  sense  an  object.  The  Doppler  effect  by  reflection  of  the  wave  triggers  the  IORS.  This 
system  is  not  G-dependent  and  requires  only  that  an  object  be  within  a collision  envelope  around  the  vehi- 
cle. It  is  commonly  known  in  the  auto  industry  as  the  "radar  sensor." 

An  additional  system  which  is  being  investigated  for  its  feasibility  is  the  inertial  navigation  sys- 
tem (INS).  In  this  case  onboard  gyroscopes  and  accelerometers  which  are  already  part  of  this  system  could 
be  monitored  by  a special  hazard  predictor  logic  circuit  to  sense  emergency  situations.  This  could  be 
coupled  with  onboard  radar  equipment  to  give  a rather  complete  picture  of  the  aircraft's  safety  status 
relative  to  impact.  Data  on  INS  has  been  obtained  from  the  AC  Electronics  Division  of  General  Motors. 

INS  systems  are  currently  used  on  commercial  jet  transports  such  as  the  Boeing  727  and  747  and  are  retro- 
fitted on  some  Boeing  707 ' s . This  system  has  also  been  installed  in  one  operational  EC-135  according  to 
AC  Electronics. 

A comprehensive  examination  of  anticipatory  sensing  devices  has  been  carried  out  by  the  Transportation 
Systems  Center  for  the  National  Highway  Traffic  Safety  Administration  in  order  to  determine  basic  system 
constraints  and  required  operational  characteristics  [Hopkins,  1971  (929)].  Two  promising  methods  were 
selected  as  deserving  further  study,  including  microwave  radar  and  ultrasonic  sonar. 
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Fig.  76.  Eaton  wide  angle  crash  active  sensor  [Pujdowski,  1972  (937)]. 


TABLE  I 

COMPARISON  OF  CRASH  SENSOR  APPROACHES 
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H 

5.5 

|| 

U 

2 

Good  crash  discrimination 
inadvertent  actuation  can 
be  eliminated;  performance 
has  been  demonstrated  in 
numerous  tests;  insensitive 
to  environment;  can  be  pro 
tected  easily  against  van- 
dalism; simplicity,  small 
site,  low  cost;  sensor 
response  time  improves 
as  vehicle  crashworthiness 
improves,  analog  relation 
ship  between  sensing  ele 
ment  and  occupant 

Sensing  and  restraint  ac 
tuation  accomplished  after 
contact  between  vehicle 
and  obstacle;  response  de 
pends  on  vehicle  construe 
tion,  impact  speed,  sensor 
parameters  and  location, 
and  nature  ot  struck  ob 
stacle. 

Crash  sensors  of  this  type 
have  been  developed  and 
used  by  Eaton.  General 
Motors,  Allied  Chemical 
and  Hamilton  Watch 

0 

$f 

3 3 

u c 

€>  O 

* £ 

No  significant  advantages 
are  apparent 

Probe  must  be  struck,  dit 
ticult  to  reduce  to  practice 
only  limited  improvement 
in  sensor  response  time 
can  be  expected 

No  concept  proposed  so 
tar  probe  can  also  be  em 
bedded  in  bumper  bar 

Proximity 

(Capacitive.  Inductive) 

Used  in  industrial  controls 
applications;  determination 
of  relative  vehicle  speed 
possible  with  some  com 
promise 

Inherent  problems  in  de- 
termining hazardous  tar 
gets  other  than  vehicles 
(especially  inductive  types) 
requires  large  sensing 
structure  sensitive  to 
environmental  conditions 
(especially  capacitive 
types);  inability  to  perform 
mass  discrimination 

Collision  avoidance  sys 
tern  using  inductive  loop 
proposed  by  Robert  Bosch 
Co  but  termed  "too 
expensive 

Is 

}! 

r 

Improved  crash  discrimi- 
nation; other  advantages 
same  as  in  previous  column. 

Inadvertent  actuation  still 
possible,  limited  reduction 
in  crash  sensor  response 
tim4  feasible  which  may  not 
warrant  associated  cost 
increase 

Proposed  by  ISC  to  DOT  to 
overcome  shortcomings  of 
radar 

ii 

QC  U 
2 

Allows  position  and  velocity 
measurement  ot  obstacle 
relative  to  protected  vehi- 
cle; solid  state  sources 
available,  potentially  low 
cost  in  5 years  in  large 
quantities;  negligible  at- 
tenuation for  distances  in 
volved  essentially  unaf 
fected  by  temperatures, 
humidity,  and  precipitation; 
desired  area  of  protection 
possible  with  some  com 
promise 

Radar  echo  may  not  be  true 
indication  of  hazard  posed 
by  obstacle,  i e poor  crash 
discrimination,  false  alarm 
possibility  due  to  inter 
vehicle  interference  no 
system  actuation  for  cer 
tain  impact  configurations 
relatively  high  cost;  pro 
tection  against  vandalism 
may  be  difficult  to  achieve 
inability  to  pertorm  mass 
discrimination 

X Band  CW  Bistatic  pro 
posed  by  TSC*  to  DOT  ** 

X Band  CW  proposed  by 
Toyota,  X Band  proposed  by 
Bendix  for  braking,  X Band 
(10  5 GH2)  proposed  by 
Bentley  Associates,  radar 
found  as  impractical  tor 
collision  avoidances  system 
by  Robert  Bosch  Co 

ae 

II 
£ _ 

# 

id 

Allows  accurate  determi- 
nation of  target  position; 
and  size  relative  velocity 
measurement  possible, 
solid  state  sources  avail- 
able; potentially  low  cost 
m 5 years  in  large  quan 
titles 

Performance  degraded  by 
foreign  material  m aper 
ture  — dust,  fog,  water, 
spray  snow,  relatively  high 
cost,  desired  area  of  pro 
tection  difficult  to  achieve; 
inability  to  perform  mass 
discrimination 

Robert  Bosch  Co  tound 
laser  impractical  tor  colli 
sion  avoidance  system 

J 

s *> 

SI 

5 

Relatively  easy  signal  pro 
cessing  due  to  lower  fre- 
quencies (probably  between 
20  and  100  KHz),  reflection 
coefficient  depends  on  bulk 
modulus  and  density  of 
obstacle,  perhaps  better 
correlation  with  mass  can 
be  expected  when  com- 
pared to  microwaves, 
reduced  vehicle-to-vehicle 
interference  due  to  atte 
nuation. 

Performance  degraded  by 
by  environment  (ice.  snow 
mud.  noise  debris);  de 
sired  area  of  protection 
difficult  to  achieve,  rela 
tively  high  cost;  much 
transducer  development 
needed. 

Ultrasonic  system  pro- 
posed by  Sytvama  Auto 
matically  flashes  warning 
light  when  vehicle  travels 
at  least  35  mph  and  comes 
within  25  feet  of  protected 
car  operates  at  100  mw 
power. 
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Department  of  Transportation  (DOT) 
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The  radar  sensor,  comprising  standard  microwave  components  and  solid  state  circuitry,  was  installed 
on  a test  vehicle  for  study.  Results  were  reported  to  be  promising  but  preliminary.  It  was  stated  that 
the  complexity  of  the  sensing  task  and  the  reliability  demands  on  the  system  require  extensive  analysis 
and  testing  before  a conclusion  can  be  drawn  as  to  overall  viability.  Table  XXII  outlines  the  applicabili 
ty  of  various  types  of  radar  to  automotive  crash  sensing  [Jones  et  al . , 1972  (936)].  The  sonar  approach 
is  a translation  of  the  radar  sensor  into  acoustic  form.  Preliminary  results  suggested  that  environmental 
considerations  and  adequate  target  discrimination  will  be  the  major  problem  areas. 

TABLE  XXII. 


APPLICABILITY  OF  BASIC  TYPES  OF  RADAR  TO  AUTOMOTIVE  RADAR 


Radar 

Property  type 

Pulse  Radar 

CW 

Bistatic  Radar 

Noise  Radar 

FM  Radar 

Double-Doppler 
Radar(Pulse  or 
FM) 

Implementation 

State-of-the-art 

(moderately 

complex) 

State-of-the-art 

(simple) 

Development  needed 

Development  needed 

Extensive  de- 
velopment 
needed 

Range 

.resol ution 
.absol ute 

.variable 

.one  fixed  range 
gate  fixed  by 

.variable 

.variable 

.variable 

val  ue 

.variable 

beam  shaping 

.variable 

.variable 

.variable 

Doppler  velocity 

.available 

.available 

.not  available 
.can  measure  vel- 
ocity from  multi- 
ple range  gates 

.available 

.available 

Threat 

.number  (single 
or  multiple; 

.mult. ,with  beam 
scan  and  logic 

.single 

.mu It., with  beam 
scan  and  logic 

.mult. .with  beam 
scan  and  logic 

.mult. .with  beam- 
scan  and  logic 

.di recti  on 

.with  mult,  range 
gates, beam-scan 
and  logic 

.no 

.with  mult,  range 
gates , beam-scan 

.with  mult,  range 
gates , beam-scan 

.available  on 
each  resolved 
target 

Jamming 

susceptibi 1 i ty 

.low(with  pulse 
coding)except 
for  receiver 
blocking 

.very  high, un- 
less some  form 
of  coding  used 

.very  low 

.low  with  wave- 
form coding 

.low  with  wave- 
form coding 

Health  hazard 

. hi gh ( peak  power) 

. 1 ow 

.low 

.low 

.low 

Complexity 

. great 

.simple 

.great 

.great 

.great 

Comparative  cost 

.high  to  very 
high 

.low 

.high  to  very  high 

.high  to  very  high 

.high  to  very 
high 

Threat  evalua- 
tion 

.poor 

.poor 

.poor 

.poor 

.poor 

Source:  Jones  et  al . , 1972  (936) 


In  addition  to  the  types  in  Table  XXII,  new  concepts  are  under  research  and  development.  A fluid 
crash  sensor  has  been  developed  by  Asahi  Chemical  Industry  Co.,  Ltd.,  Japan,  using  the  electro-magnetic 
effect  of  electric-conductive  fluid  (mercury)  [Ikeda  et  al . , 1974  (933)].  The  electric  conductive  fluid 
flows  in  response  to  the  acceleration  force  externally  applied.  The  fluid  velocity  is  proportioned  to  car 
velocity  changes  and  can  be  detected  by  the  electro-magnetic  effect.  The  fluid  movement  can  be  restricted 
by  the  threshold-G  level  setting  which  utilizes  the  surface  tension  of  mercury.  The  sensor  consists  of 
mercury  as  electric-conductive  liquid,  a permanent  magnet,  Y-shaped  liquid  passage,  electrodes  to  detect 
liquid  velocity,  multi-hollow  fibers  as  a G-level  setting  method,  non-return  ball  valve,  electronic  voltage 
amplifier,  comparator,  and  thyristor  switches.  This  crash  sensor  has  been  found  usable  for  a wide  range 
from  10  to  over  300  G's.  Problems  include  the  quality  degradation  and  leakage  of  mercury  likely  to  occur 
when  used  for  a long  period.  Work  is  continuing  on  modification  to  a multi-directional  type  of  crash  sen- 
sor. Sperry  Rand  Corporation  has  recently  proposed  an  electromagnetic  detection  scheme  which  may  obviate 
many  of  the  deficiencies  of  conventional  radar  techniques.  The  system  is  called  BARBI,  an  acronym  for 
BAsebond  Radar  Bog  initiator  [Ross,  1974  (938)].  The  proposed  technique  involves  the  transmission  and 
reception  of  a sub-nanosecond  basebond  or  video  impulse-like  signal  (i.e.,  no  RF  carrier)  and  requires 
virtually  no  microwave  components. 

As  of  this  date  little  objective  data  on  crash  deceleration  profiles  are  available  for  transport  air- 
craft. Previously  reported  tests  have  utilized  Beechcraft  C-45,  Fairchild  C-82,  Piper  J-3,  Cessna  150, 
Douglas  DC-7,  Lockheed  L-1049,  helicopters,  and  other  aircraft,  but  no  experimental  data  relative  to  cur- 
rent jet  transports  are  known,  although  extrapolations  and  calculations  are  found  in  various  crashworthi- 
ness design  manuals,  and  crash  acceleration  profiles  have  been  assumed  as  a base  in  several  studies  (e.g., 
Yost  and  Oates,  1969  [682]  for  air  transports,  Carr  and  Phillips,  1973  [852]  for  light  aircraft).  Although 
the  anticipatory  sensors  such  as  radar,  acoustic,  or  optical  systems,  would  appear  to  be  promising  as  air- 
craft sensors,  development  and  research  have  not  yet  progressed  to  the  point  where  a particular  system 
appears  to  be  completely  adaptable.  In  considering  the  best  crash  sensor  for  use  with  an  inflatable  re- 
straint system  concept  for  light  aircraft,  Carr  and  Phillips  [1973  (852)]  concluded  that  an  inertia  sensor 
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was  more  appropriate  than  a radar  or  anticipatory  sensor  within  the  state-of-the-art  at  that  time.  Still 
a third  alternative  [Snyder  and  Robbins,  1971  (22);  Diamond,  1973  (1005)]  is  active  deployment  of  the  in- 
flatable restraint  systems  by  a crew  member  when  a crash  situation  appears  imminent.  This  degrades  the 
passive  aspects  of  the  system  and  also  would  not  provide  protection  in  the  case  of  accidents  where  the  im- 
pact occurs  without  adequate  warning  for  the  crew  member  to  deploy  the  air  bags. 

At  this  time  the  data  gathered  in  automotive  crash  testing  are  not  directly  applicable  to  aircraft 
crash  sensors  because  of  differences  in  crash  pulse.  Automotive  crash  pulses  are  of  shorter  duration, 
usually  of  greater  magnitude,  and  primarily  have  a horizontal  acceleration  vector.  It  is  concluded  that 
information  is  still  too  incomplete  for  the  selection  of  a reliable  sensor  system  for  the  deployment  of 
inflatable  restraint  systems  in  jet  transport  aircraft. 


4.6.11.5  Inflation  Energy  (Gas)  Sources.  The  function  of  the  energy  source  is  to  provide, 
release,  and  control  a volume  of  gas  at  a rapid  rate  to  inflate  the  air  bag.  Basic  energy  sources  include 
stored  gas,  generated  gas,  and  hybrid  sources,  or  looked  at  another  way,  stored  gas,  augmented  air,  pyro- 
technic, and  aspirator  systems.  Companies  active  in  research  and  development  of  energy  sources  include 
01  in  Corporation,  Allied  Chemical  Company,  Thiokol  Corporation,  Eaton  Corporation,  Rocket  Research  Corpora- 
tion, Ensign-Bickford  Company,  Dow  Chemical  Company,  and  other  domestic  as  well  as  foreign  manufacturers. 

At  present  there  are  seven  generations  of  inflation  systems  which  have  been  developed  or  are  under 
development. 


4.6.11.5.1  Stored  gas  system.  This  system  provides  a rapid  supply  of  non-toxic 
gas  for  any  size  bag  system.  The  stored  gas"  system- i s by  far  the  heaviest  and  most  bulky  of  the  systems 
being  considered  for  introduction  into  motor  vehicles.  The  air  bottle,  a thick-walled  cylindrical  pressure 
vessel  with  spherical  caps  at  the  ends,  has  a volume  of  2.6  liters  (160  cu  in)  and  a filled  pressure  of 
246  kg/sq  cm  (3,500  psi)  for  a right  front  passenger  installation  with  a volume  of  283  liters  (10  cu  ft). 
Representative  systems  have  a weight  of  approximately  9 kg  (20  lb).  Because  of  the  propellant  properties 
of  the  bottle,  a substantial  structure  is  required  to  support  it  during  bag  inflation.  The  system  has  the 
advantage  of  a cool  operating  temperature  and  nontoxic  gases. 

4.6.11.5.2  Stored  gas  system  with  modulated  flow.  This  is  the  same  as  the  stored 
gas  system  with  the  exception  that  the  gas  delivery'  valve  regulates  flow  to  provide  a gentler  stage  of 
initial  inflation.  This  reduces  the  inflation  sound  level  and  the  impact  of  the  bag  on  an  out-of-position 
occupant. 


4.6.11.5.3  Augmented  air  system.  This  consists  of  a solid  propellant  which,  when 
ignited,  heats  a small  volume  of  stored  air  and  then  inflates  the  bag.  The  size  of  the  package  is  much 
smaller  than  a stored  gas  system  but  there  is  some  danger  of  toxic  fumes.  The  system  proposed  by  01  in 
Corporation  supplements  propellant  energy  with  stored  air.  A prime  advantage  of  this  system  is  smaller 
storage  volume.  Specifically,  a 283  liter  (10  cu  ft)  bag  requires  only  g83  cu  cm  (60  cu  in)  of  storage 
compared  with  2,622  cu  cm  (160  cu  in)  for  a pure  stored  gas  system.  01 i n has  chosen  aluminum  alloy  for 
system  fabrication.  As  a result  the  Olin  system  compares  favorably  from  the  viewpoint  of  weight  with  the 
pure  pyrotechnic  device.  An  additional  advantage  is  that  the  gases  generated  by  the  augmented  air  concept 
do  not  present  a toxicity  problem.  However,  when  combined  with  the  smoke  which  could  be  present  in  an  air- 
craft crash,  toxic  levels  would  develop  more  quickly  than  would  be  the  case  when  a pure  air  system  is  used. 
An  additional  advantage  over  a pure  pyrotechnic  system  concerns  bag  surface  temperatures  which  have  been 
measured  to  not  increase  more  than  21 °C  (70°F)  above  the  test  ambient  air  temperature.  An  augmented  air 
system  of  this  type  appears  to  have  some  advantages  over  either  a pure  stored  air  or  a pyrotechnic  inflation 
device. 


4.6.11.5.4  Augmented  air  system  with  staging.  This  is  the  same  as  the  augmented 
air  system  with  the  exception  that  not  all  the  propellant  is  ignited  in  low  level  impacts,  thus  leading  to 
a soft  bag  for  low  level  impacts  and  a hard  bag  for  high  level  impacts.  Staging  has  also  been  proposed  as 
a concept  to  deal  with  the  problem  of  multiple  impacts.  Stages  of  inflation  could  be  added  for  each  impact. 
This  concept  has  been  proposed  informally  by  Eaton  Corporation  in  their  activities  with  Rocket  Research 
Corporation . 


4.6.11.5.5  Liquid-cooled  solid  propellant  gas  generator  system.  A solid  propellant 
provides  the  gas  source  which  is  then  liquid  cooled,  usually  by  freon.  The  major  difficulties  in  adapting 
conventional  gas  generator  technology  to  the  inflation  of  air  bag  restraints  relate  to  time,  temperature, 
and  toxicity  problems.  The  air  bag  must  be  inflated  in  hundredths  of  a second,  and  the  propellant  combus- 
tion must  be  accordingly  rapid.  Cool -burning  propellants  must  be  used,  or  hot  product  gases  must  be  cooled 
in  the  generator.  Gases  and  smoke  vented  from  the  generator  and  cushion  must  be  sufficiently  safe  that 
occupants  are  not  injured. 

In  Sweden  a study  of  the  solid  fuel  gas  generator  has  been  reported  [Jacobsson  and  Thoren,  1972  (943)]. 
A bag  of  60  liter  (2  cu  ft)  capacity  was  filled  in  75  msec.  Bag  failure  occurred  in  several  cases,  and  was 
assumed  to  be  due  to  the  temperature  of  the  solid  fuel  gas  and  its  composition.  A review  of  compact,  all- 
solid gas  generators  is  provided  by  Lane  et  al . [1972  (947)]. 

The  use  of  a pure  gas  generation  inflation  system  has  several  advantages  as  well  as  disadvantages 
when  compred  to  a stored  gas  system.  A typical  system  is  approximately  30.5  cm  (12  in)  long  and  has  a dia- 
meter of  8.3  cm  (3.25  in).  The  shape  is  roughly  cylindrical.  The  weight  of  prototypes  is  approximately 
3.2  kg  (7  lb),  offering  a considerable  advantage  over  the  stored  gas  systems.  During  inflation,  the  gas 
generator  operating  pressure  is  211  kg/sq  cm  (3,000  psi)  which  is  comparable  with  the  stored  gas  system. 

A possible  disadvantage  is  the  bag  surface  temperature  which  can  easily  exceed  93°  C (200°  F).  Because  of 
the  fact  that  a propellant  is  required  for  actuation  of  the  system,  certain  federal  regulations  must  be 
met  in  the  transport  of  systems,  either  in  bulk  prior  to  assembly  in  a vehicle  or  by  the  vehicle  owner 
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himself.  The  legal  problems  of  installing  gas  generation  systems  in  motor  vehicles  have  not  yet  been  com- 
pletely solved.  Additional  controversy  arises  over  the  presence  of  toxic  gases  resulting  during  inflation. 
The  major  problem  appears  to  be  carbon  monoxide.  Most  of  the  gas  generation  systems  appear  to  be  minimal- 
ly acceptable  relative  to  carbon  monoxide.  Serious  consideration  must  be  given  to  the  toxicity  problem 
because  of  the  fact  that  the  aircraft  could  possibly  be  full  of  smoke  due  to  the  crash.  Any  additional 
toxic  fumes  in  a marginal  environment  could  present  a serious  problem.  The  major  advantages  of  the  system 
appear  to  be  smaller  size  and  lighter  weight,  fewer  leakage  problems,  and  greater  design  versatility. 

4.6.11.5.6  Solid-cooled  solid  propellant  gas  generator  system.  This  light  system 
which  is  in  the  early  stages  of  development  appears  to  Yvo id  toxicity  p rot  Terns  by  the  addition  of  a mechani- 
cal filter  for  solid  particulate  matter  and  a chemical  filter  for  toxic  fumes,  as  shown  in  Fig.  77. 


ACCORDION  PACKET  TORROID 


In  January,  1976,  the  National  Highway  Traffic  Safety  Administration  issued  a request  for  proposals 
for  development  of  a solid  propellant  inflation  technique  for  the  subcompact  car  passenger  restraint  sys- 
tems. This  study  will  also  require  review  of  the  test  evaluation  of  Thiokol  inflators  (Contract  D0T-HS- 
801-748). 


4.6.11.5.7  Aspirator  systems . An  aspirator  is  essentially  a pump  that  utilizes 
the  kinetic  energy  of  one  fluid  to  cause  motion  of  another  fluid.  A primary  high  velocity  fluid  is  supplied 
to  the  aspirator  and  its  kinetic  energy  includes  motion  of  the  ambient  fluid  near  the  inlet.  These  two 
fluids  pass  through  a mixing  section  where  a portion  of  the  fluids’  kinetic  energy  is  converted  into  an 
increase  in  static  pressure.  A generalized  aspirator  consists  of  a primary  flow  tube,  an  inlet  area  and 
a diffuser  or  flow  channel. 

Three  types  of  systems  are  under  early  development.  In  the  first  of  these  air  is  mixed  with  the 
propellant  gas  to  fill  the  bag  with  cool  gas.  In  the  second,  support  structure  for  the  bag  is  inflated 
with  a gas  generation  system  and  the  remainder  of  the  bag  by  aspiration  of  cabin  air.  The  major  concern 
is  that  the  amount  of  ambient  air  used  decreases  as  inflation  time  decreases.  For  a jet  transport  the 
available  inflation  time  is  probably  sufficient  to  make  this  system  particularly  attractive.  (See  Fiq.  78.) 

A third  aspirator  system  is  the  self-deployed  air  induction  inflation  system  which  has  been  proposed 
by  Rocket  Research  Corporation.  In  this  system  a series  of  about  20  small  thrusters  is  attached  to  the  bag 
material.  The  thrusters  are  ignited  by  the  sensor  and  actually  push  the  bag  out  while  drawing  air  into 
the  bag.  The  mass  of  the  individual  thrusters  is  very  low  and  the  thrust  forces  are  distributed  over  the 
air  bag  material.  Therefore,  if  an  occupant  would  contact  the  system  during  deployment,  the  local  mass 
concentrations  should  not  be  large  enough  to  cause  Injury.  A considerable  weight  saving  is  inherent  in 
this  system  because  there  is  no  need  for  stored  gas  or  for  a diffuser.  A rough  estimate  of  the  weight  of 
inflation  hardware  Is  .9  kg  (2  lb).  The  weight  of  the  gas  source  alone  in  the  other  augmented  air  systems 
and  In  the  pure  pyrotechnic  system  is  3.2  kg  (7  lb),  while  the  weight  of  the  air  bottle  in  the  pure  air 
system  is  about  9 kg  (20  lb).  Rocket  Research  Corporation  is  aiming  to  draw  80  to  90£  of  the  inflation 
gas  required  to  fill  the  bag  from  the  vehicle  interior.  This  obviously  will  result  in  a lower  over-pres- 
sure In  the  vehicle  which  would  be  a great  advantage  when  many  systems  are  deployed.  No  data  have  yet  been 
obtained  concerning  deployment  accuracy  of  this  system.  If  protective  performance  equal  to  the  other  sys- 
tems is  available  and  the  low  percentage  of  gases  are  found  to  be  non-toxic.  It  would  be  a likely  candidate 
for  use  in  USAF  transports,  provided  problems  of  heat  where  the  thrusters  contact  the  occupant's  body  are 
sol ved. 
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ENVIRONMENTAL  AIR 


Fig.  78.  Two  types  of  aspirator  systems. 


4.6.11.6  Diffuser  Design.  The  diffuser  is  that  component  of  the  system  which  delivers  the 
gas  supply  to  the  deploying  bag.  As  such  it  controls  the  rate  and  direction  of  flow  into  the  bag.  There- 
fore, the  design  of  the  diffuser  is  critical  in  providing  a successful  deployment. 

Most  diffuser  designs  which  are  used  in  right  front  inflating  restraint  systems  consist  of  a cylin- 
drical steel  tube  with  a series  of  vertical  slots  through  which  the  gas  supply  can  flow.  One  important 
variable  is  diffuser  diameter  (as  diameter  is  increased,  slot  area  is  also  increased).  Initial  air  bag 
tests  at  HSRI  [Robbins  et  al . , 1971  (909)]  were  conducted  using  a diffuser  with  a diameter  of  5 cm  (2  in). 

It  was  found  that  a small  out-of-position  dummy  occupant  placed  close  to  the  bag  experienced  potentially 
dangerous  G-loadings  on  the  head  and  torso  due  to  bag  inflation  alone.  When  the  diameter  of  the  diffuser 
was  increased  to  7.6  cm  (3  in),  thus  reducing  the  initial  velocity  of  the  deploying  bag,  the  G-loadings 
were  reduced  to  acceptable  levels  based  on  current  human  tolerance  data. 

Another  aspect  of  diffuser  design  which  was  studied  at  HSRI  is  the  effect  of  the  slots  on  sound  pres- 
sure levels  [Nicholls,  1970  (988)].  The  gas  dynamics  of  the  reservoir  blowdown-bag  inflation  process  have 
been  considered  and  characteristic  values  of  the  mo^e  important  parameters  have  been  computed  by  the  use  of 
a somewhat  simplified  mathematical  model  of  the  system.  A series  of  tests  has  been  made  to  determine  the 
noise  level  produced  by  various  types  of  slots  on  a steady  flow  over  a range  of  pressures.  Schlieren 
photographs  (still  and  high  speed  movies)  have  been  taken  of  the  flow  from  the  slots.  The  preliminary  data 
indicate  that  interference  effects  between  the  individual  jets  lead  to  higher  noise  levels  than  would  be 
expected  from  increase  of  mass  flow  rates  alone.  Further  steady  flow  tests  of  various  slot  configurations 
have  been  planned.  It  is  anticipated  that  these  steady  flow  tests  will  be  compared  with  projected  blowdown 
tests  of  a typical  air  bag  system  in  order  to  define  the  characteristics  of  the  major  noise  generating 
mechanisms  and  thereby  indicate  the  techniques  most  likely  to  result  in  reduction  of  peak  noise  levels. 

4.6.11.7  Human  Volunteer  Tests . Preceded  by,  and  concurrent  with,  studies  utilizing  baboon 
subjects  [Snyder  et  al . , 1967  (791);  Clarke  et  al.,  1970  (7,  959)]  and  anthropomorphic  dummies,  several 
programs  related  to  human  subject  tests  and  evaluation  of  air  bag  restraint  systems  have  been  conducted. 

A program  to  compare  man's  subjective  tolerance  levels  during  impact  using  (1)  a lap  belt  only  and 
(2)  a lap  belt  plus  air  bag  was  conducted  at  Holloman  AFB,  New  Mexico  from  August,  1969  through  March,  1970. 
This  program  was  directed  by  the  Aerospace  Medical  Research  Laboratory,  Wright-Patterson  AFB  under  inter- 
agency agreement  with  the  Department  of  Transportation.  The  experimental  approach  was  to  expose  five  male 
subjects  to  increasingly  severe  impacts  until  in  the  medical  monitor's  judgement  testing  should  be  terminated. 
The  lap  belt  tests  were  conducted  using  a 4.4  cm  (1-3/4  in)  wide  webbed  dacron  belt  rated  at  2,721  kg  (6,000 
lb)  strength.  Lap  belt  tests  were  terminated  at  15  G since  "there  was  a marked  increase  in  severity  of  post- 
run neck  and  hip  pain  complaints  and  secondly,  the  mean  lap  belt  load  peak  had  risen  from  760  lb  at  12  G's 
to  975  at  15  G's  with  one  subject's  belt  loading  as  high  as  1,163  lb.  Assuming  a linear  extrapolation  to 
an  18  G level  it  was  felt  that  a proper  safety  factor  of  belt  strength  to  belt  load  could  not  be  maintained" 
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[Bendixen,  1970  (955)].  Initial  dummy  tests  with  a pre-inflated  air  bag  (plus  lap  belt  restraint)  were 
unsuccessful  as  it  was  too  soft  for  subject  support,  although  3 human  tests  were  conducted  at  9 G.  A hy- 
brid air  bag  (plus  lap  belt  restraint)  was  then  developed,  consisting  of  a pre-inflated  bag  into  which 
additional  gas  was  discharged  during  impact;  however,  films  of  six  subjects  being  impacted  at  12  G revealed 
an  excessive  amount  of  rebound  accompanied  by  hyperextension  of  the  neck.  In  a third  series  of  tests,  an 
Eaton^  Yale  and  Towne  rapidly-inflating  air  bag  system  (plus  lap  belt  restraint)  was  used,  with  5 volunteer 
test  subjects  impacted  at  12  G. 

The  pre-inflated  bag  tests  reported  by  Gragg  [1970  (963,  964)]  may  have  application  to  the  current 
discussion  in  that  there  may  be  a short  time  before  a crash  occurs  for  the  occupant  to  position  himself  in 
the  restraint  system.  The  conclusions  of  these  tests  were  as  follows:  (1)  The  legs  are  able  to  transmit 

considerable  force  during  an  impact,  which  verifies  the  work  of  other  investigators;  (2)  The  bag  is  most 
effective  when  the  occupant  is  in  contact  with  it  prior  to  impact  so  that  he  loads  the  bag  before  the  belt, 
thereby  eliminating  the  phase  lag  which  can  occur  between  belt  and  bag  loading;  (3)  A version  of  this  type 

air  bag  would  reduce  the  incidence  of  head  and  thorax  contact  with  hazardous  interior  surfaces  during  crash 

landings,  materially  reducing  the  fatalities  and  trauma  resulting  from  such  impacts;  (4)  The  air  bag  gave 
the  sled  subjects  a relaxed,  confident  feeling  prior  to  impact  and  they  were  enthusiastic  in  their  accep- 
tance of  the  device;  and  (5)  It  was  difficult  to  control  the  amount  of  bracing  of  the  subjects'  legs.  This 
factor  appeared  to  be  related  to  the  subjects'  emotions. 

A comparison  between  lap  belt,  Air  Force  harness,  and  air  bag  restraint  systems  was  also  reported  by 
Gragg  [1970  (963,  964)].  The  air  bags  were  deployed  upon  impact  for  this  test  series.  In  addition  to 
similar  results  related  to  subject  bracing,  the  following  conclusions  were  reached:  (1)  The  lap  belt  plus 

air  bag  lowered  both  impulse  and  peak  force  loadings  to  the  pelvis  when  compared  to  the  lap  belt  only  (ob- 

viously because  the  loading  is  distributed  between  two  devices  during  the  air  bag  tests);  (2)  The  Air  Force 
harness  produced  slightly  less  reduction  of  the  pelvic  loading  when  compared  to  the  lap  belt  only.  In 
cases  where  the  stiff  belt  system  is  snug,  as  was  the  case  in  these  tests,  the  occupant  tends  to  interact 
with  the  lap  belt  before  reaching  peak  interaction  with  the  softer  bag.  Thus  the  bag,  as  currently  used, 
can  do  little  to  reduce  pelvic  or  knee  loads.  The  combination  of  an  energy-absorbing  lap  belt  in  combina- 
tion with  the  air  bag  can  be  shown  to  aid  in  overcoming  this  problem  in  phasing  the  forces  applied  to  the 
occupant;  and,  (3)  The  lap  belt  plus  air  bag  increased  the  foot  loading  significantly  when  compared  to  the 
lap  belt  only  and  the  Air  Force  harness.  Because  of  the  potential  of  the  legs  for  carrying  impact  loads 
this  redistribution  of  loading  is  desirable. 

A second  test  program  involving  air  bags  was  conducted  at  Holloman  AFB  under  inter-agency  agreement 
for  the  National  Highway  Traffic  Safety  Administration  of  the  Department  of  Transportation,  utilizing 
General  Motors  Corporation  "air  cushion"  developments.  Extending  from  November,  1970  through  August,  1971, 
tests  included  both  static  and  dynamic  deployments.  Although  these  1970  tests  do  not  go  further,  and 
failed  in  their  objective  to  reach  subjective  tolerance  levels,  much  useful  data  were  obtained.  Important 
because  they  represented  the  first  dynamic  tests  of  human  volunteer  subjects  exposed  to  rapidly-inflating 
air  bag  restraints,  these  tests  showed  that  the  lap  belt  plus  air  bag  was  capable  of  significantly  reducing 
the  impulses  and  peak  forces  transmitted  to  the  pelvis  when  compared  to  the  lap  belt  alone  [Gragg  et  al., 
1970  (963)].  The  failure  of  these  tests  was  subsequently  analyzed  by  HSRI,  the  University  of  Michigan 
[McElhaney  et  al.,  1971  (969)],  and  McElhaney  also  analyzed  data  gathered  in  a test  program  conducted  by 
Bendixen  [1970  (955)]  at  the  Daisy  Track,  Holloman  AFB.  Analysis  of  the  Bendixen  study  indicated  that  a 
lap  belt  plus  a rapidly-inflating  bag  performs  significantly  better  than  the  lap  belt  alone  by  reducing: 

(1)  linear  and  angular  head  motion,  (2)  linear  head  acceleration,  (3)  shoulder  motion,  (4)  pelvic  pain, 

(5)  foot  pan  load,  and  (6)  seat  back  rebound  load.  Most  of  these  observations  agree  with  the  results  of 
Gragg.  (See  Table  XXIII) 

Static  tests  were  conducted  in  January,  1971,  consisting  of  41  human  exposures  to  full  air  cushion 
deployment  by  16  male  volunteer  subjects.  These  involved  a production  bench  seat  mounted  in  a 1971  GMC 
Chevrolet  Impala,  and  seven  different  body  positions  were  studied:  right  front  passenger,  center  front 

passenger,  right  and  center  front  passengers,  and  right  front  passenger  with  legs  crossed,  seated  side- 
ways, arms  forward,  and  leaning  forward.  For  this  program  the  reliability  of  the  air  bag  operation  was 
0.969,  two  failures  occurring  out  of  the  65  tests  [Greer  and  Gragg,  1971  (966)].  The  results  of  the 
Temporal  Estimation  Test  indicated  that  the  explosive  inflation  of  the  air  bag  disturbed  the  subjects' 
ability  to  perform  a simple  behavioral  task  for  a duration  of  up  to  four  seconds.  During  bag  blossoming, 
the  bag  displaced  the  legs  of  subjects  3 to  11.2  cm  (1.2  to  4.4  in)  at  velocities  ranging  from  .5  to  7.9 
m/sec  (1.7  to  26  ft/sec).  The  arms  were  similarly  displaced  4 to  43  degrees  at  an  angular  velocity  of  112 
to  517  degrees  a second.  Head  velocities  reached  7.2  m/sec  (23.5  ft/sec). 

Dynamic  tests  of  13  male  volunteer  subjects  were  conducted  during  the  summer  of  1971  at  Holloman  AFB, 
usinq  the  General  Motors  "production"  air  cushion  ("soft  bag").  An  overall  view  of  this  series  has  been 
reported  by  Smith  et  al . [1972  (971)].  Problems  found  during  the  1971  tests  included:  (1)  rebound,  (2) 

high  head  acceleration,  (3)  "bottoming"  of  the  knees  against  the  diffuser  (subjects  wore  shin  guard  protec- 
tion), (4)  hyperextension  of  the  knees,  and  (5)  induced  lateral  head  rotation. 

A 1972  experimental  design  was  intended  to  include  35  human  runs,  preceded  by  12  to  20  dummy  tests, 
at  velocities  up  to  48  km/h  (30  mph)  in  Phase  I,  and  35  runs  with  a different  head  rest  design  in  Phase  II. 
These  were  designed  to  duplicate  some  80  dummy  simulator  tests  conducted  by  General  Motors  [Buschman  and 
Russell,  1972  (957);  Smith  et  al . , 1975  (973)].  Major  differences  between  the  1972  production  system  to 
be  tested  in  these  tests  and  the  preceding  1971  tests  were  in  use  of  a larger  bag  (410  liters  vs.  283 
liters  [14.5  cu  ft  vs.  10  cu  ft]),  higher  pressure  in  the  knee  bag  (.5  vs.  .28  kg/sq  cm  [7  vs.  4 p s i ] ) , 
outer  bag  lower  pressure  (.14  vs.  .5  kg/sq  cm  [2  vs.  7 p s i ] ) , entire  bag  porous  (1971  bag  only  side  panels 
porous),  and  inflator  orifice  size  reduced  from  2.5  to  1.5  cm  (1  to  .6  in).  Although  this  results  in  a 
softer,  more  slowly  deploying  bag  with  better  energy  dissipation,  it  may  increase  the  risk  of  bottoming 
out  for  larger  individuals  at  high  speeds.  The  1972  tests  using  human  volunteers  were  delayed  from  late 
spring  until  August  due  to  deficiencies  in  the  air  bag  protection  found  in  the  preliminary  tests.  A total 
of  33  impact  tests  were  conducted  with  13  subjects.  Observed  trauma  was  "mild"  for  all  test  subjects,  and, 
as  compared  to  the  earlier  program,  Head  Severity  Indices  (HSI)  averaged  851  in  the  1971  tests  and  258  in 
the  1972  tests  at  48  km/h  (30  mph)  [Brinkley  et  al . , 1974  (956)].  The  most  adverse  finding  reported  was  a 
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TABLE  XXIII. 

SUMMARY  DATA  PEAK  VALUES 


Lap 

foot 

Head* 

Shoulder* 

knee* 

TKTgh* 

Restraint 

Run 

5ubject 

Weight 

Height 

Pulse 

8el  t 

Pan 

Rebound 

Neck 

Pelvis 

Chest 

ax 

Ay 

44 

A*x 

AX 

Ay 

AX 

Ay 

AX 

Ay 

AS 

5ystem 

No. 

No 

1 

cm. 

9's 

1 

# 

I 

Pain 

Pain 

9's 

in 

In 

degrees 

ft/sec 

ft/sec 

rad/ sec 

9’s 

9's 

rad/sec? 

In 

In 

In 

In 

In 

In 

degrees 

Lip  Belt  Only 

4795 

144 

158 

169 

8.3 

240 

717 

594 

- 

- 

7.0 

13 

9 

47 

29 

10 

8 

11 

5 

200 

7 

2 

1 

1 

1 

1 

5 

47% 

146 

199 

176 

9.8 

563 

384 

975 

+++ 

- 

8.8 

18 

18 

75 

34 

31 

29 

13 

14 

800 

15 

6 

3 

3 

3 

1 

12 

Pre- Inflated  8ag 

4800 

151 

178 

177 

94 

683 

131 

140 

• 

- 

9 6 

18 

5 

65 

29 

6 

22 

10 

4 

1100 

11 

2 

0 

1 

2 

1 

21 

Lip  Belt  Only 

5082 

118 

136 

180 

11.6 

666 

150 

410 

- 

- 

10.5 

25 

27 

108 

: 37 

41 

33 

18 

16 

400 

21 

13 

4 

4 

4 

3 

11 

5081 

128 

155 

171 

12.4 

949 

245 

163 

♦♦ 

- 

18.3 

28 

27 

127 

39 

46 

45 

24 

18 

1600 

19 

8 

5 

5 

4 

2 

20 

5077 

144 

158 

169 

12.6 

687 

445 

673 

♦♦♦ 

- 

12.6 

21 

16 

no 

32 

16 

16 

11 

8 

500 

14 

3 

1 

2 

1 

1 

6 

5078 

127 

177 

185 

11.5 

703 

340 

551 

• 

8 5 

17 

12 

85 

32 

20 

24 

11 

8 

500 

14 

5 

1 

2 

1 

1 

10 

5079 

151 

178 

177 

11.4 

1030 

282 

760 

♦♦ 

♦ 

22  1 

19 

16 

100 

37 

28 

45 

17 

18 

1700 

16 

6 

1 

3 

1 

1 

16 

5080 

146 

199 

176 

10.1 

530 

605 

949 

— 

- 

17.3 

15 

14 

72 

31 

23 

24 

11 

10 

400 

11 

6 

1 

2 

1 

1 

9 

Lip  8elt  Plus 
Hybrid  Airbag 

5095 

118 

136 

180 

11.0 

603 

101 

240 

* 

- 

15.2 

13 

1 

20 

36 

3 

14 

25 

3 

550 

1 

1 

1 

1 

1 

1 

8 

5094 

128 

155 

171 

11  9 

147 

283 

880 

- 

* 

15.0 

11 

2 

62 

36 

5 

31 

19 

5 

1000 

4 

1 

1 

2 

1 

1 

14 

5097 

144 

158 

169 

12  4 

500 

920 

808 

♦♦ 

• 

16.2 

17 

6 

100 

44 

16 

43 

22 

14 

1200 

1 

1 

1 

1 

1 

1 

7 

5096 

127 

177 

185 

13  0 

990 

262 

980 

♦♦ 

- 

17  2 

15 

6 

70 

41 

13 

30 

20 

14 

700 

3 

1 

1 

1 

1 

1 

6 

5099 

151 

178 

177 

12.1 

1126 

122 

430 

• 

♦ 

14.8 

9 

2 

27 

9 

34 

17 

18 

8 

250 

4 

2 

1 

1 

1 

1 

29 

5100 

146 

199 

176 

10.0 

500 

590 

1348 

- 

♦ 

17.2 

8 

3 

19 

33 

8 

26 

32 

10 

1000 

0 

0 

3 

3 

3 

1 

14 

Up  8el  t Only 

5179 

118 

136 

180 

14.6 

800 

540 

360 

- 

11.4 

18 

20 

13 

33 

29 

36 

13 

10 

550 

15 

13 

0 

4 

1 

2 

12 

5175 

128 

155 

171 

15.3 

903 

404 

500 

♦♦ 

- 

16.4 

25 

27 

138 

38 

41 

36 

19 

11 

700 

15 

11 

1 

3 

0 

1 

13 

5177 

144 

158 

169 

15.4 

808 

755 

440 

- 

• 

14.6 

22 

18 

122 

36 

24 

25 

13 

12 

1050 

16 

7 

0 

3 

0 

2 

9 

5174 

127 

177 

185 

16.8 

1050 

474 

640 

- 

- 

15.9 

25 

25 

128 

36 

36 

35 

17 

13 

900 

16 

10 

1 

3 

0 

2 

12 

5)78 

151 

178 

177 

15.0 

1163 

370 

860 

-M- 

- 

18.3 

18 

18 

23 

33 

29 

41 

14 

11 

650 

18 

9 

0 

3 

1 

2 

16 

5176 

146 

199 

176 

15.4 

1120 

714 

760 

- 

— 

23.4 

23 

22 

102 

31 

29 

39 

13 

10 

1500 

19 

11 

1 

4 

1 

2 

13 

Lip  8elt  Plus 

5225 

118 

136 

180 

11  6 

600 

301 

N/A 

- 

- 

12.1 

7 

3 

40 

30 

5 

26 

12 

10 

1100 

3 

1 

1 

5 

2 

1 

15 

Rapidly 

Inflating  Alrbig 

5224 

128 

155 

171 

11.3 

780 

560 

N/A 

♦ 

12.1 

7 

4 

38 

1? 

8 

27 

8 

4 

480 

8 

2 

0 

2 

0 

1 

12 

5226 

144 

158 

169 

11.8 

510 

686 

N/A 

- 

116 

10 

3 

76 

34 

6 

22 

8 

5 

600 

6 

1 

1 

2 

0 

1 

9 

5227 

127 

177 

185 

11.8 

600 

368 

N/A 

♦ 

- 

11  6 

7 

1 

43 

3t 

3 

14 

10 

4 

600 

4 

2 

2 

1 

2 

1 

6* 

5228 

151 

178 

177 

118 

890 

144 

N/A 

♦ 

- 

16  2 

7 

3 

61 

27 

20 

9 

14 

600 

3 

2 

0 

3 

1 

1 

10 

* * No  reported  symptoms  *♦  * Persisting  symptoms  24  hours 

♦ * Immediate  Symptoms  Only  « Persisting  symptoms  48  hours 


•From  photometric  analysis 


muscle  spasm  in  one  subject  which  continued  for  about  a week  after  the  test,  and  was  explained  as  poor  pre 
impact  body  and  head  position  by  the  investigators.  Table  XXIV  presents  a summary  of  the  data  from  these 
most  recent  tests. 

In  the  fall  of  1973  the  Southwest  Research  Institute  in  San  Antonio,  Texas  initiated  additional  huma 
volunteer  studies  under  contract  to  General  Motors  to  evaluate  further  aspects  of  air  cushion  protective 
performance.  One  series  of  tests  involved  "startle"  experiments  in  which  deployment  (without  vehicle 
impact)  occurred  in  vehicles,  with  subjects  from  17  to  72  years  of  age  closely  monitored  for  medical  and 
physiological  reactions.  Other  tests  involved  human  volunteers  exposed  to  air  cushion  deployments  on  a 
test  deceleration  to  48  km/h  (30  mph)  velocity.  These  data  have  not  been  published. 

Although  there  appears  to  be  some  discrepancy  between  the  same  test  data  reported  by  different 

individuals  and  a tendency  for  some  reports  to  favor  the  successes  and  minimize  the  problems,  the  fact 
remains  that  the  air  bag  as  reported  tested  to  a maximum  of  48.4  km/h  (30.1  mph)  (sled  velocity)  offers 
excellent  potential  as  an  occupant  restraint  system.  (This  same  capability  has  also  been  shown  by  an  ad- 
vanced passive  3-point  belt,  with  volunteer  male  subjects  who  were  exposed  to  crash  velocities  of  48  km/h 
[30  mph].  These  subjects  tensed  muscles,  braced,  and  flexed  the  head  prior  to  impact,  and  suffered  no  re- 
ported significant  pain  or  injury  [Hendler  et  al . , 1974  (968)].)  However,  the  human  voluntary  tests  con- 
ducted to  date  using  healthy  young  male  subjects  under  optimum  conditions,  require  continued  research  to 
explore  potential  effects  of  restraint  systems  upon  other  segments  of  the  population.  It  is  often  over- 
looked that  these  tests  were  conducted  with  lap  belts  as  well  as  air  bag  systems.  Until  tests  of  the  air 

bag  alone  are  conducted  with  human  volunteers,  its  value  as  a purely  passive  system  remains  incompletely 

documented. 
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TABLE  XXIV. 

SUMMARY  OF  DATA  FROM  TESTS  WITH  HUMAN  SUBJECTS 


Test 

No 

Subj 

No 

Sled 

Accel 

hxL 

Sled 

Vel 

(rcphj. 

Head 

Impact 

Jj&L 

Accel 

Rebound 

(9j- 

Sever 

Index 

Chest  Accel 
Impact  Rebound 
(lbs)  (lbs) 

6507 

A 

9.3 

16.0 

15.0 

4 

31 

12.5 

5 

6508 

B 

9.1 

15.6 

11.5 

4 

19 

11.0 

6 

6510 

C 

8.3 

14.9 

13.5 

3 

18 

14.0 

3 

6511 

D 

8.9 

15.5 

14.0 

3 

35 

28.1 

0 

6514 

E 

13.0 

20.5 

22.3 

9 

89 

14.0 

5 

6515 

F 

13.4 

20.9 

15.1 

4 

158 

28.4 

0 

6524 

C 

13.4 

20.9 

15.2 

6 

97 

15.0 

3 

6525 

G 

12.9 

20.5 

18.3 

5 

135 

29.1 

3 

6528 

H 

15.4 

22.0 

22.0 

3 

298 

30.0 

3 

6529 

I 

16.3 

22.3 

22.4 

4 

155 

26.1 

3 

6531 

K 

15.2 

21.5 

20.7 

3 

216 

15.1 

X 

6532 

J 

15.0 

21.5 

21.2 

6 

133 

33.8 

2 

6534 

M 

20.0 

24.0 

19.1 

11 

359 

24.9 

5 

6535 

B 

19.4 

23.7 

23.4 

4 

521 

20.3 

4 

6537 

E 

19.2 

24.1 

19.2 

3 

160 

29.6 

3 

6538 

J 

19.9 

24.3 

19.9 

3 

183 

44.2 

2 

6556 

B 

19.0 

24.2 

19.0 

9 

94 

24.5 

3 

6557 

C 

19.4 

24.3 

19.4 

7 

108 

20.0 

3 

6540 

G 

18.1 

25.9 

32.7 

3 

297 

38.0 

2 

6541 

H 

18.2 

26.0 

30.1 

8 

240 

29.4 

3 

6543 

I 

18.7 

26.5 

26.9 

10 

216 

27.4 

6 

6544 

K 

18.5 

26.2 

37.7 

4 

339 

45.4 

3 

6559 

E 

17.6 

25.5 

24.4 

1 

200 

31 .9 

3 

6563 

D 

18.3 

26.2 

34.4 

2 

166 

46.2 

2 

6564 

F 

18.2 

26.2 

37.1 

3 

168 

22.5 

2 

6561 

G 

18.8 

28.1 

35.1 

3 

373 

47.2 

2 

6566 

I 

19.2 

23.2 

34.3 

12 

420 

26.0 

9 

6567 

M 

18.6 

27.7 

32.8 

4 

229 

34.7 

3 

6569 

B 

19.5 

28.0 

26.6 

1 

127 

31.7 

1 

6571 

G 

19.4 

29.7 

38.6 

4 

282 

50.5 

2 

6572 

C 

18.7 

29.8 

28.6 

X 

150 

35.0 

3 

6574 

H 

21.1 

30.8 

33.9 

4 

256 

29.7 

3 

6575 

M 

20.3 

30.1 

34.1 

4 

297 

32.6 

3 

4.6.11.8  Noise.  Potential  noise  hazard  from  air  bag  inflation  has  been  reviewed  in  a com- 
prehensive study  by  Bolt,  Beranek  and  Newman,  Inc.  [Allen  et  al . , 1970  (975)]  under  contract  with  the 
NHTSA  (Contract  No.  D0T-HS-006-1 -006) . The  three  objectives  of  their  study  were  to:  (1)  establish  tenta- 

tive criteria  for  exposure  to  air  bag  noise,  (2)  find  the  noise  levels  expected  in  motor  vehicles,  and  (3) 
estimate  the  percentage  of  the  population,  if  any,  where  hearing  might  be  permanently  affected  by  wide- 
spread exposure  to  the  noise  of  inflatable  restraint  systems. 

This  study  concluded  that,  based  on  tolerance  data  developed  during  the  project,  exposure  to  a full 
complement  of  motor  vehicle  air  bags  inflated  simultaneously  could  lead  to  hearing  damage  in  15%  to  30% 
of  the  exposed  persons.  This  indicates  a considerable  problem  with  air  bags  of  1970  vintage.  They  have 
also  interpreted  limited  available  information  to  conclude  that  various  special  groups  (young,  aged,  in- 
firm, or  those  with  hearing  related  problems)  are  not  substantially  different  from  the  normal  population 
and  therefore  could  be  considered  by  their  general  tentative  criteria. 

The  possibility  of  reducing  the  sound  levels  to  more  acceptable  levels  using  available  acoustical 
engineering  techniques  has  been  pointed  out  and  recommended.  For  example,  they  estimate  that  a reduction 
of  15  db  in  air  bag  noise  would  ensure  that  essentially  the  entire  exposed  population  would  be  protected 
from  hearing  damage. 

Because  of  the  tentative  nature  of  their  noise  criteria  the  following  research  studies  should  be 
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conducted:  (1)  psycho-acoustic  studies  of  temporary  threshold  shift  produced  by  pulses  of  noise  and/or 

pure  tones  at  the  frequencies,  levels,  and  durations  anticipated  for  air  bag  deployment;  (2)  analyses  of 
the  noise  signal  as  a function  of  frequency,  duration,  and  occupant  position  for  each  of  the  several 
sources  of  noise  in  a deployment  of  a realistic  air  bag;  and,  (3)  complete  literature  survey  covering  all 
types  of  impact  noise  exposure  along  with  the  physical  and  clinical  aspects. 

The  diffuser  system  most  prominently  employed  in  delivering  gas  to  an  air  bag  system  (a  manifold  with 
slots)  has  been  subjected  to  a limited  set  of  tests  at  the  University  of  Michigan  by  Nicholls  [1970  (988)]. 
The  noise  levels  were  determined  for  one,  two,  and  three  manifold  type  slots  on  a steady  flow  basis  over 

a range  of  pressures.  Still  and  high  speed  Schlieren  photographs  were  taken  of  the  flow  from  the  slots. 

The  preliminary  data  has  indicated  that  interference  effects  between  individual  jets  lead  to  higher 
noise  levels  than  would  be  expected  from  increase  of  mass  flow  rates  alone.  The  conclusion  reached  is  that 
the  manifold  slot  configuration  is  capable  of  producing  very  high  noise  levels,  when  a large  number  of 
slots  are  supplied  with  expected  operating  manifold  pressures.  Although  the  configuration  of  the  reser- 
voirs, throat,  and  the  manifold  entrance  section  may,  directly  or  indirectly,  contribute  to  the  overall 
sound  level,  the  potential  for  noise  reduction  appears  to  be  greatest  in  the  area  of  manifold  "slot"  de- 
sign. Both  automobile  manufacturers  and  suppliers  are  working  on  this  problem  with  some  apparent  progress. 

The  question  of  human  auditory  response  to  an  air  bag  inflation  noise  was  also  considered  in  an 
often-cited  report  by  Nixon  [1969  (989)]  and  in  a subsequent  report  presented  at  the  annual  conference  of 
the  American  Association  of  Automotive  Medicine  in  1970.  However,  this  work  failed  to  answer  several  key 
questions,  such  as  would  the  direct  slap  of  an  air  bag  acceleration  against  the  ear  cause  serious  struc- 
tural damage  and  hearing  loss?  And  would  the  infant  ear  be  more  susceptible  to  noise  trauma?  Since  the 

surface  of  the  inflating  air  bag  is  traveling  at  a velocity  in  excess  of  160  km/h  (100  mph),  and  Nixon's 

subjects  were  never  in  direct  contact  with  the  bag,  Richter  et  al . [1974  (990)]  undertook  further  tests. 

Using  infant  squirrel  monkeys  in  tests  at  the  University  of  Michigan,  no  permanent  hearing  damage,  eardrum 
perforation,  or  disruption  of  ossicles  occurred  at  air  bag  velocities  up  to  160  km/h  (100  mph)  and  a sound 
intensity  of  150  db.  Other  studies  have  been  conducted  by  General  Motors  Corporation  [Hickling,  1974  (987)]. 
These  reports  generally  minimized  the  noise  problem  for  the  general  population  based  upon  right  front  pas- 
senger air  bag  inflations  in  the  presence  of  human  volunteers.  Although  early  industry  work  had  indicated 
pressures  of  .35  kg/sq  cm  (5  psi ) might  be  expected  [Van  Wagoner,  1967  (992)],  subsequent  developments  have 
not  validated  such  high  pressures,  and  noise  is  not  generally  considered  to  be  a problem.  However,  it  is 
obvious  that  this  area  requires  further  research,  particularly  in  regard  to  physiological  effects  on  the- 
occupant. 


4.6.11.9  Toxic i ty . Since  the  air  bag  system  utilizes  a highly  compressed  gas  or  pyrotechnic 
gas  source  for  infl ation  there  is  a possibility  that  if  occupants  of  a vehicle  are  unable  to  egress  imme- 
diately post-crash,  they  may  be  exposed  to  emissions  which  are  toxic  or  which  deprive  them  of  critical 
oxygen.  Due  to  the  potential  legal  questions  this  is  of  concern  to  the  suppliers  and  manufacturers,  and 
attempts  to  reduce  or  eliminate  this  hazard  have  been  studied.  One  of  the  most  comprehensive  reports  in 
the  literature  is  by  Rocket  Research  Corporation  [Schmidt,  1972  (997)],  and  another  is  by  01 i n Corporation 
[McDonnell,  1971  (996)].  Early  air  bags  used  compressed  air  (hence  the  name  "air  bag").  However,  com- 
pressed air,  particularly  in  augmented  systems,  was  abandoned  after  finding  a potential  for  reaction  of 
oxygen  with  structural  materials  in  the  highly  compressed  air.  Nitrogen  or  argon  was  subsequently  used  in 
compressed  or  augmented  systems. 

Hypoxia  and  suffocation  may  occur  if  the  oxygen  concentration  in  the  car  falls  below  its  normal  level 
through  dilution  with  an  inert  gas  such  as  nitrogen.  The  rate  of  breathing  is  increased  1.5  times  at  10% 

O2,  doubled  at  9%  O2,  and  tripled  at  5%  O2.  Stress  on  the  cardiovascular  system  may  also  occur  in  an  O2 
deficient  environment,  and  prolonged  exposure  to  less  than  10%  O2  may  not  be  survivable  for  some  individu- 
als. Cardiac  arrest  may  occur  within  a minute  when  the  oxygen  content  drops  below  5%  [Schmidt,  1972  (997)]. 

Early  tests  at  General  Motors  indicated  that  inflation  of  a right  front  seat  air  bag  only  from  a 
compressed  nitrogen  source  resulted  in  the  local  O2  content  dropping  below  13.5%  and  remaining  there  for 
several  minutes.  One  of  the  trade-offs  is  that  the  cleanest  gas  generators  and  aspirators  require  more 
space  and  weight. 

At  the  time  of  the  3rd  International  Conference  on  Occupant  Protection  (Troy,  Michigan,  July,  1974), 
the  Society  of  Automotive  Engineers  Inflatable  Occupant  Restraint  System  Task  Force  met  to  consider  the 
feasibility  or  desirability  of  preparing  an  information  report  containing  guidelines  for  the  use  of 
chemically  generated  gas  in  air  bag  systems.  Although  it  was  obvious  that  there  were  a multitude  of  un- 
known factors  requiring  further  study,  this  committee  was  disbanded.  Tarriere  [1972  (921)],  in  reviewing 
French  tests  with  air  bag  systems,  emphasized  that  generators  using  the  pyrotechnic  principle  "still  pre- 
sent an  unsolved  toxicity  problem"  and  went  on  to  conclude:  "It  is  not  even  certain  that  the  doctors  in 

charge  of  determining  the  thresholds  of  tolerance  possess  all  the  elements  necessary  to  make  a judgement" 

(p.  6). 

Lawwill  [1972  (948)],  in  reviewing  the  potential  reaction  products  of  augmented  inflators,  found  only 
three  in  sufficient  quantity  to  be  significant:  carbon  monoxide  (CO),  nitrogen  dioxide  (NO2),  and  nitric 

oxide  (NO).  However,  other  gases  produced  include  carbon  dioxide  (CO2),  chlorine  (CI2),  nitrous  oxide 
(N2O),  sulphur  oxide  (SO),  sulphur  dioxide  (SO?),  sodium  chloride  (NaCl),  hydrogen  (H?),  hydrogen  chloride 
(HC1),  hydrocarbons , ammonia  (NH3),  water  (H2O),  oxygen  (O2 ) * potassium  chloride  (KCl),  phosgene  (C0CI2), 
hydrogen  sulfide  (H2S),  and  nitrogen  (N2).  Dow  Chemical  Company  [Lane  et  al . , 1972  (947)]  has  conducted 
experiments  with  gas-generating  propellants  which  yield  only  nitrogen  gas  or  carbon  dioxide,  and  report 
only  minor  effects  on  animals  tested.  Johnson  et  al . [1971  (944)]  provides  tables  of  gas  analysis  in  the 
01  in  Safe-T-Flate,  and  useful  toxicity  tables. 

It  is  clear  that  at  the  present  time  there  are  no  toxicological  test  procedures  or  guidelines  available 
to  engineers  in  selecting  the  propellants  for  the  air  bag  restraint  systems.  Published  toxicological  data 
generally  do  not  apply  to  exposures  as  brief  as  those  anticipated  in  automotive  collisions.  A major  problem 
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is  that  data  are  not  available  concerning  the  toxicity  of  mixtures  of  gases,  vapors,  and  particles  likely 
to  be  encountered  in  such  exposures.  The  question  of  toxicity  effects  has  not  received  the  research  re- 
quired to  determine  if  potential  hazards  may  be  significant. 

4.6.11.10  Accident  Experience.  A large  number  of  air  bag  restraint  systems  have  been  placed 
in  vehicles  to  date  and  approximately  75  accidents  severe  enough  to  result  in  bag  deployment  have  occurred 
to  date. 

Ford  Motor  Company  equipped  831  Mercurys  with  air  bags  for  field  testing  in  March,  1972.  Of  these, 

203  went  to  Allstate  Insurance  Company,  101  to  Allied  Chemical  Company,  323  to  Eaton  Corporation,  125  to 
General  Services  Administration,  and  79  were  retained  by  Ford  Motor  Company  employees.  In  the  third  crash 
which  occurred,  an  air  bag-equipped  Mercury  struck  the  rear  of  a police  car  at  109  km/h  (68  mph),  according 
to  the  police  radar  tape,  crushing  the  rear  of  it  in  1.7  m (5.5  ft)  [Yost,  1973  (1003)].  The  driver  es- 
caped with  a fractured  wrist  and  leg  cuts  and  bruises,  and  this  is  of  particular  interest  in  that  the 
driver  was  not  wearing  a seat  belt. 

The  "first"  air  bag  accident  (another  Ford  "first")  occurred  9 October,  1972  in  Santa  Barbara,  Cali- 
fornia and  involved  an  air  bag-equipped  1972  Mercury  Monterey  two-door  hardtop  that  was  struck  at  the  right 
front  corner  by  a 1966  Reo  garbage  truck.  But  since  there  was  only  a driver  and  no  right  front  seat  occu- 
pant, and  the  sole  air  bag  was  on  the  passenger  side,  little  information  was  obtained  concerning  occupant 
protection.  It  is  interesting  to  note  that  the  driver,  a claims  adjuster  for  Allstate  Insurance  Company, 
indicated  "that  he  experienced  a pronounced  ringing  sensation  in  his  ears  immediately  after  the  accident 
but  that  it  had  disappeared  within  a few  hours"  [Yost,  1972  (1002)]. 

The  first  General  Motors  air  cushion  deployment  occurred  21  April,  1973,  when  a U.S.  Park  Police 
1973  Chevrolet  was  hit  at  a curve  by  a skidding  vehicle  at  80.5  km/h  (50  mph).  The  air  bag  deployed  proper- 
ly but  it  was  not  possible  to  determine  the  effectiveness  of  the  system  due  to  the  nature  of  the  impact. 
However,  the  driver's  eye  glasses  stayed  on,  and  he  did  not  notice  the  noise  of  the  deployment. 

The  General  Motors  Air  Cushion  Restraint  System  Field  Trial  Program  was  initiated  in  November,  1972 
(subsequent  to  the  successful  human  volunteer  tests  reported  during  August,  1972  at  Holloman  AFB),  with 
an  intent  to  place  1,000  1973  Chevrolet  Impala  4-door  sedans  in  high  mileage  fleets.  Approximately  850 
air  cushion-equipped  vehicles  were  actually  placed  in  service.  In  the  first  year  of  operation,  with  over 
19  million  miles  of  fleet  experience,  there  were  9 impacts  of  sufficient  severity  to  cause  deployment, 
and  over  230  non-deployment  accidents.  There  was  also  one  inadvertent  activation.  These  accidents  have 
been  detailed  by  Smith  [1973  (1001)].  As  of  March,  1976,  it  is  estimated  that  some  10,000  GM  "air  cushion" 
equipped  vehicles  are  in  service,  having  been  offered  to  customers  as  an  option. 

O' Day  and  Morgan  [1972  (1000)]  calculated  that  if  the  first  1,000  air  bags  were  put  into  operation 
in  Denver,  Colorado,  15  deployments  might  occur  over  a year's  period,  based  upon  current  accident  statis- 
tics. Using  accident  data  from  Denver  in  1969,  they  theorized  that  of  40,140  accidents  involving  cars, 
only  6,923  (17.23%)  were  severe  enough  to  have  deployed  an  air  bag.  Only  30.7%  of  these  cases  (2,126 
vehicles)  reported  any  injuries.  In  comparison,  using  accident  data  from  the  Ohio  turnpike  over  a 4-year 
period,  they  predicted  that  in  air  bag-equipped  cars,  deployment  would  have  resulted  in  4,046  out  of  6,437 
(63%),  substantially  higher  than  in  the  urban  Denver  environment.  Based  upon  accidents  studied  in  England, 
Mackay  projected  that  to  obtain  benefits  equal  to  those  of  passive  air  bag  systems,  seat  belt  usage  would 
have  to  be  78%,  considerably  higher  than  present  experience  in  most  countries.  However,  he  concluded  that 
"because  of  the  incidence  of  ejection,  multiple  impacts,  side,  rear  and  rollover  accidents,  seat  belts 
have  greater  benefits  in  the  real  world  of  accidents  than  airbags  as  currently  envisaged"  [1972  (999)]. 

Air  bag  deployments  in  actual  collisions  to  date  have  provided  some  useful  data,  although  inconclu- 
sive to  date.  Frontal  impacts  up  to  16  km/h  (10  mph),  and  side  and  rear  impacts  at  40  km/h  (25  mph)  did 
not  deploy  the  bags.  There  have  been  no  adverse  effects  from  noise,  nor  reported  toxicity  effects  (al- 
though no  occupants  were  trapped  in  the  environment  for  an  extended  time).  There  have  been  three  fatali- 
ties in  air  bag  vehicles  to  date,  although  one  case  would  not  have  been  survivable  with  any  protective 
system.  Two  individuals  were  smoking  pipes,  and  received  insignificant  injury  from  the  deployment.  It 
may  be  significant  to  note  that  of  a large  number  of  legal  actions  resulting  from  air  bag-equipped  vehicle 
accidents,  one  lawsuit  against  General  Motors  alone  is  for  8 million  dollars.  More  field  experience  will  be 
necessary  before  further  conclusions  can  be  drawn,  as  the  data  to  date  are  insufficient. 

4.6.11.11  Air  Transport  Application.  The  foregoing  has  provided  a brief  summary  of  current 
data  relative  to  many  aspects  of  the  air  bag  inflatable  restraint  system  which  may  be  considered  important 
to  aircraft  application.  Reviewing  each  of  these  suggests  that  while  major  advances  have  been  made  in  some 
technological  aspects,  almost  all  areas  present  problems  which  have  not  yet  been  resolved  for  the  automo- 
tive vehicle  after  a decade  of  effort  and  at  considerable  cost. 

To  date,  other  than  the  pioneering  work  of  Clark  and  Blechschmidt  at  the  Martin  Company  [1966  (863); 
also  (850,  854-862)],  the  only  published  study  relative  to  assessing  air  bag  feasibility  based  upon  recent 
(but  not  present)  technology  in  aircraft  consists  of  a preliminary  conceptual  study  for  light  aircraft 
only  [Carr  and  Phillips,  1973  (852)].  One  dynamic  test  and  several  static  tests  of  a prototype  system  for 
light  aircraft  have  also  been  conducted  by  the  FAA  [Sommers,  1972  (919)].  McDonnell  Douglas  has  developed 
a foam-filled  air  cushion,  integral  with  the  seat  back  cushion,  which  can  be  inflated  and  deflated  at  will 
and  which  conforms  to  the  individual  body  contours  [Hawkins,  1974  (671)];  however,  this  is  a comfort  item 
rather  than  one  which  provides  occupant  protection. 

The  most  direct  recent  application  to  air  transport  occupant  protection  has  probably  been  made  by 
the  F.L.  Diamond  Corporation  of  Granada  Hills,  California.  In  1973  they  initiated  development  of  an  in- 
flatable air  bag  which  was  designed  to  mount  in  the  back  of  an  airline  seat.  The  initial  prototype  was 
designed  for  a McDonnell  Douglas  DC-10  passenger  seat,  and  the  seat  back  was  protected  by  an  asbestos 
shield.  Initial  activation  was  intended  to  be  by  means  of  either  manual  operation  or  operation  from  the 
flight  deck,  although  the  manufacturer  felt  that  it  could  be  electronically  activated  by  means  of  a variety 
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of  sensors  [Diamond,  1976  (1005)].  As  shown  in  Figs.  79-82,  this  restraint  system  stows  compactly  in  the 
seat  back  along  with  the  passenger's  emergency  oxygen  system.  Activation  of  the  prototype  shown  is  by 
means  of  the  same  size  carbon  dioxide  cylinder  used  for  inflation  of  pneumatic  life  preservers  (MIL-C- 
25369A  Type#  137.5  gr).  The  prototype  bag  holds  approximately  13  liters  (793  cu  in)  of  gas  and  has  dimen- 
sions of  30.5  cm  (12  in)  wide,  28  cm  (11  in)  high,  and  7.6  cm  (3  in)  deep.  Weight  of  the  prototype  sys- 
tem, including  the  container  structure,  is  approximately  2.9  kg  (6.5  lb),  less  than  previous  estimates  of 
Clark  (863)  and  Carr  and  Phillips  (852),  but  does  not  include  any  electronic  initiator  device.  The  air 
bag  and  CO2  inflation  system  itself  weighs  only  435  grams  (14  oz).  (It  should  be  noted  that  these  data 
have  been  obtained  from  inspection  of  the  prototype  device  and  are  not  manufacturer's  specifications.) 

In  contrast  to  current  automotive  inflatable  restraints,  which  would  cost  from  $75  to  $300  each  to  replace 
each  time  used,  the  Diamond  system  is  equipped  with  a simple  exhaust  gas  release,  and  once  the  bag  has 
been  deployed,  it  can  be  packed  up  again  and  reused  immediately  at  no  cost  except  for  a new  CO2  cylinder. 
At  present  this  device  is  only  in  a prototype  stage  and  would  require  further  development  and  dynamic 
testing;  however,  the  concept  and  application  to  air  transports  merit  further  consideration. 


Fig.  80.  Cover  removed,  showing  stowage  of 
bag  at  top,  CO?  cylinder  at  right.  Activation 
is  manual  in  this  prototype. 


Fiq.  7Q.  Prototype  inflatable  air  bag  restraint 
system  stowed  in  passenger  seat  back,  under  de- 
veloDment  by  F.L.  Diamond  Corporation,  Granada 
Hills,  California. 


Fig.  81.  Once  the  bag  is  inflated, 
it  forms  a protective  cushion  for 
head  impact. 


Fig.  82.  The  inflatable  bag,  shown  in  de- 
flated and  inflated  configurations. 


One  important  consideration  for  civil  air  transport  use  of  passive  restraint  systems,  besides  econo- 
mic, maintenance,  and  reliability  concerns,  is  whether  additional  weight  penalty  may  be  involved.  Carr  and 
Phillips  [1973  (852)]  have  estimated  additional  weight  requirements  for  general  aviation  air  bag  restraints 
as  3.63  kg  (8  lb)  per  occupant.  Assuming  similar  bag  specifications  and  requirements  for  air  transport 
aircraft,  this  would  add  over  a ton  weight  penalty  to  a wide  body  transport.  Earlier  Clark  et  al . [1966 
(863)]  had  estimated  their  four  chest  and  foot  bags  and  inflating  system  would  weigh  7.26  kg  (15  lb)  at 
each  double  seat;  however,  the  prototype  double  airline  passenger  seat  designed  at  the  Martin  Company, 
Baltimore,  for  testing  weighed  only  15.87  kg  (35  lb),  compared  to  the  standard  26.76  kg  (59  lb)  airline 
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seat  being  used  at  that  time  by  air  carriers.  Thus  use  of  a lighter  seat  could  nullify  the  weight  penalty 
of  air  bag  systems,  provided  the  seat  met  other  operational  requirements  including  strength  and  comfort 
factors . 

At  present  the  air  bag  remains  extremely  controversial,  with  proposed  federal  mandatory  requirements 
for  passive  restraint  (air  bags)  for  automotive  use  continuing  to  be  postponed  by  NHTSA.  Since  it  is  not 
within  the  scope  of  this  study  to  discuss  this  in  greater  detail,  primary  references  which  should  be  exa- 
mined for  in-depth  information  would  include  data  in  the  FMVSS  208  docket  (898),  the  1973  Congressional 
Hearings  (865),  the  Office  of  Science  and  Technology  RECAT  report  (900),  especially  the  evolution  of  the 
state-of-the-art  on  restraint  systems  to  1972  by  Brown  (1004),  and  papers  previously  cited  in  the  1st,  2nd, 
and  3rd  International  Conferences  on  Occupant  Protection/Passive  Restraints  [1970  (899);  1972  (917);  1974 
(918)].  In  addition  to  the  Brown  overview  and  assessment  of  passive  restraint  systems  in  the  RECAT  report 
(900,  1004),  NHTSA  research  efforts  and  conclusions  have  been  reported  by  Carter  [1972  (853)]  who  predicted 
an  automotive  80.5  km/h  (50  mph)  capability  for  the  air  bag  system,  in  a report  by  Strother  and  Morgan 
[1974  (920)],  in  discussion  of  societal  priorities  [Warner  et  al . , 1975  (925)],  in  a number  of  mathematical 
modeling  reports  [King  et  al.,  1972  (885);  Robbins  et  al.,  1971  (909);  Hammond,  1971  (875)],  and  in  numerous 
other  reports  and  studies  related  to  economic,  technical,  and  protective  aspects  of  the  air  bag.  A favorable 
report  has  also  been  issued  by  DeLorean  [1975  (879)].  While  a cost/benefit  critique  is  found  in  Gates 
[1975  (874)]  and  in  RECAT  (900),  NHTSA  has  also  published  an  extensive  bibliography  [1973  (1006)]  and 
"Vital  Facts"  (924).  The  Insurance  Institute  for  Highway  Safety  has  published  a chronological  review 
(Status  Report,  21  February,  1974,  vol . 9,  no.  4).  Unfortunately,  like  the  Concorde,  the  air  bag  has  be- 
come  entwined  in  political  aspects  rather  than  strictly  technical  issues. 

Results  of  extensive  tests,  accident  data,  and  human  volunteer  testing  clearly  indicate  that  the  air 
bag  restraint  system,  as  developed  for  automotive  vehicles,  is  capable  of  offering  excellent  occupant  pro- 
tection in  frontal  collisions  of  a severe  nature.  However,  often  such  data  have  been  obtained  in  conjunc- 
tion with  a lap  belt  restraint,  which  means  that  the  air  bag  system  is  not  entirely  a passive  restraint 
under  such  conditions.  Further,  questions  of  occupant  protection  in  side  impact,  rollovers,  multiple  im- 
pacts, and  in  a number  of  other  modes  have  not  yet  been  adequately  answered  by  the  current  air  bag  systems. 
Since  the  automotive  crash  conditions  differ  significantly  from  those  encountered  in  air  transport  crashes, 
it  is  uncertain  how  this  system  will  work  in  aircraft  until  further  testing  is  conducted.  No  system  of 
crash  sensor,  for  example,  is  yet  known  to  be  capable  of  reliably  sensing  an  impending  aircraft  crash 
(the  FAA  Carr  and  Phillips  light  aircraft  conceptual  study  recommended  active  mechanical  sensors,  and  the 
Diamond  prototype  air  bag  is  at  present  manually  operated).  It  is  concluded  that,  while  the  air  bag  sys- 
tem is  promising,  at  this  point  in  the  state-of-the-art,  the  NASA  Ames  air  transport  seat,  the  rearward- 
facing seat,  or  one  of  several  integral  restraints  would  offer  better  all-around  crash  protection  for  the 
air  transport  passenger. 


5.  AISLE  AND  EVACUATION  MARKERS 

Accident  data  from  a number  of  studies  indicate  that  in  most  "survi vable"  jet  transport  crashes  to 
date  occupant  survival  has  been  largely  determined  by  the  ability  of  uninjured  passengers  to  leave  their 
seats  and  find  an  exit  before  succumbing  to  fire  or  smoke.  The  aisle  and  evacuation  path  markers,  placards, 
lights,  and  other  devices  which  assist  in  efficient  and  orderly  evacuation  in  case  of  a crash  emergency 
must  be  considered  with  respect  to  known  human  factors  considerations  such  as  size,  illumination,  color, 
background,  form,  location,  and  ease  in  understanding,  as  well  as  reliability,  maintainability,  and  system 
safety  aspects. 

Aisle  markers  and  emergency  evacuation  path  markers  include  reflective  tapes,  signs,  arrows,  and  non- 
radioactive luminous  strips  for  use  in  marking  evacuation  routes.  In  addition,  other  products  can  be  ap- 
plied to  floors,  wainscotings , and  other  interior  surfaces.  While  some  require  a self-contained  power 
supply,  other  systems  require  no  power  supply  at  all.  Aisle  width  requirements  are  also  briefly  examined 
in  this  section. 

5.1  Aisle  Width 


Due  to  the  variable  cargo/passenger  configurations  of  military  air  transport  aircraft  there  is  no 
standard  aisle  width.  For  civil  jet  transports  minimum  aisle  width  is  specified  by  Federal  Air  Regulation 
25.815  (1010)  as  not  less  than  38  cm  (15  in)  measured  less  than  63.5  cm  (25  in)  from  the  floor,  and  50.8  cm 
(20  in)  measured  63.5  cm  (25  in)  or  more  from  the  floor,  for  air  transport  aircraft  having  a seating  capa- 
city of  20  or  more  passengers  (Table  XXV).  Part  25.817  of  the  FAR's  also  specifies  that  on  airplanes  having 
only  one  passenger  aisle,  no  more  than  3 seats  abreast  may  be  placed  on  each  side  of  the  aisle  (1011). 

TABLE  XXV. 

CIVIL  AIR  CARRIER  PASSENGER  AISLE  WIDTH  REQUIREMENTS 
SPECIFIED  IN  F.A.R.  PART  25.815 


Minimum  passenger  aisle  width  (inches) 


Passenger  Seating  Capacity 

Less 

from 

than  25  inches 
floor 

25  inches  or  more 
from  floor 

10  or  less 

12 

15 

11  through  19 

12 

20 

20  or  more 

15 

20 

Ill 


A typical  incident  points  out  an  unanticipated  problem  with  current  (FAR)  civil  air  carrier  aisle 
widths.  As  a result  of  inflight  turbulence  encountered  by  a Boeing  747,  6 passengers  and  one  stewardess 
were  hospitalized  and  15  passengers  and  one  stewardess  received  minor  injuries  [Flight  Safety  Focus,  1971 
(1012)].  Injuries  were  caused  by  failure  to  wear  seat  belts  during  the  turbulence,  failure  of  overhead 
storage  bins,  and  failure  of  economy  seat  headrests;  however,  following  landing,  great  difficulty  was  en- 
countered in  removing  injured  passengers  because  the  aisles  were  too  narrow  for  standard  stretchers.  Fig. 

16  (Section  2. 2. 1.6)  shows  the  litter  in  the  aisle  and  in  the  passenger  cabin  as  a result  of  an  Icelandic 
McDonnell  Douglas  DC-8  crash. 

On  military  aircraft  minimum  aisle  width  conditions  occur  when  maximum  capacity  seating  accommoda- 
tions are  required  for  troop  movement.  Examples  are  154  troops  being  carried  in  the  maximum  density  seating 
configuration  of  the  Lockheed  C-141A  in  which  four  rows  of  side-facing  nylon  collapsible  seats  extend  the 
length  of  the  cabin  area.  In  instances  where  troops  are  being  airlifted  for  long  distances  and  must  re- 
main in  these  cramped  quarters  for  long  periods  of  time,  significant  decrement  in  their  task  performance 
has  been  reported  [Knapp,  1971  (1014)].  For  example,  the  aisle  spacing  between  the  inner-  and  outer-facing 
rows  on  each  side  of  the  cabin  is  so  small  that  it  has  been  found  that  at  night  a passenger  cannot  proceed 
up  the  aisle  to  a comfort  station  without  climbing  over  (and  waking  up)  many  others.  In  practice,  there- 
fore, Knapp  reported  that  passengers  climbed  along  the  center  netting  rather  than  use  the  crowded  aisles. 

When  two  rows  abreast  of  triple  aft-facing  seats  are  used  in  the  Boeing  C-135,  the  aisle  width  is  also 
minimal  (1016).  However,  even  when  cargo  is  carried,  the  spacing  left  along  the  sides  for  passengers  to 
reach  an  exit  may  also  be  marginal.  In  the  case  of  one  Boeing  C-135  crash  illustrated  in  Fig.  19,  note 
that  the  spillage  of  small  cargo  into  the  left-hand  aisle  effectively  blocked  that  aisle  completely,  con- 
tributing to  the  fatalities  of  four  individuals.  It  is  not  uncommon  for  already  narrow  aisles  to  be  fur- 
ther littered  with  debris  and  baggage  after  a crash,  as  many  of  the  civil  air  carrier  accident  reports 
have  indicated. 

Since  the  aisle  width  specifications  of  the  FAR  were  established  25  years  ago  in  a 1951  study  by 
King  (1013),  and  there  is  known  to  be  a significant  generational  body  size  increase,  current  anthropometric 
data  were  examined  to  provide  a means  of  comparing  a 38  cm  (15  in)  minimum  aisle  width  (at  63.5  cm  [25  in] 
floor  height)  with  the  potential  aisle  user.  In  this  regard  the  1967  anthropometric  survey  of  USAF  flying 
personnel  [Clauser,  unpublished  data,  1971  (1008)]  shows  that  the  mean  airman  hip  breadth  is  35.25  cm 
(13.88  in),  the  95th  percentile  is  38.48  cm  (15.15  in),  and  the  99th  percentile  is  40.23  cm  (15.84  in).  If 
an  allowance  for  clothing  is  made,  it  appears  that  a 38  cm  (15  in)  aisle  width  at  hip  height  will  be  a 

tight  fit  for  much  of  the  potential  military  male  user  population,  and  many  would  be  forced  to  go  through 

this  narrow  space  sideways,  which  would  also  slow  down  evacuation  time.  Females  would  probably  exceed 
these  male  values  by  an  estimated  2.5  to  5.1  cm  (1  to  2 in).  However,  the  most  recent  public  health  survey 
has  not  yet  been  published  for  the  statistic  of  hip  breadth  in  the  general  U.S.  population.  Further  human 
factors  or  anthropometric  data  can  be  found  in  Damon  et  al . [1971  (1009)],  Mohler  et  al . [1964  (1015)], 
and  Alexander  et  al . [1971  (1007)]. 

In  the  BAC/Aerospati al e Concorde  the  first  and  last  seat  in  each  cabin  has  been  modified  to  provide 
the  minimum  aisle  width  as  specified  in  TSS  Standard  5-2  and  FAR  Part  25.815. 

To  assist  the  passenger  in  emergency  egress,  several  aisle  and  evacuation  path  marker  concepts  have 
been  proposed.  These  include  the  application  of  chemical  luminescence  for  emergency  signs,  direction  in- 
dicators, egress  areas,  and  for  marking  and  identifying  emergency  equipment;  ultraviolet  light  activation 
of  egress  signs;  use  of  fluorescent  spray;  tactile  aids;  floor  level  marker  illumination;  and  pulsating 
indicators . 

5.2  Chemo-Il 1 uminescence 


Two  principal  systems  which  employ  chemical  reactions  for  the  production  of  visible  light  ("chemical 
light")  have  been  developed.  One  system  developed  by  E.I.  duPont  de  Nemours  and  Co.  and  marketed  by  Reming- 
ton Arms  Company  employs  a chemo-il luminescent  material  which,  upon  exposure  to  oxygen  in  the  air,  produces 
visible  light.  This  material  is  utilized  inside  long,  sealed  transparent  plastic  tubes  for  illumination  of 
the  side  tubes  of  the  escape  slides  carried  aboard  some  civil  air  carrier  transports.  Activation  of  the 
inflation  system  injects  air  into  the  sealed  tubes  and  therefore  activates  the  material,  producing  visible 
light.  It  can  be  provided  in  any  width  or  length.  Since  only  air  is  required  to  produce  light  from  this 
chemical,  advantages  appear  to  be  that  it  can  be  isolated  from  other  lighting  systems  independently  and 
presents  no  fire  or  explosion  hazard.  It  is  also  reported  to  be  fail-safe,  lightweight,  submersible,  and 
to  have  long  maintenance-free  standby  life.  This  system  can  be  applied  to  emergency  signs,  direction  in- 
dicators, emergency  equipment,  life  rafts,  emergency  exit  doorways,  life  jacket  devices,  and  for  illumina- 
ting controls  and  egress  areas,  as  well  as  escape  slides  or  other  devices.  United  Airlines  has  used  chemi- 
cal luminescence  for  a number  of  years  to  outline  escape  slides  and  to  provide  some  exterior  illumination. 

Another  system  developed  by  the  American  Cyanamid  Company  employs  two  liquids  which,  when  brought 
together,  produce  visible  light  which  may  be  piped  to  various  points  in  order  to  illuminate  specific  areas. 
Similarly,  a two-compartment  container  has  been  produced  which,  when  squeezed,  fractures  a barrier  or 
ampoule  of  one  liquid  so  that  when  they  come  in  contact  a visible  light  is  produced.  A variety  of  concepts 
utilizing  these  materials  have  been  pursued.  These  include  a Remington  Chemical  System  suspended  in  a gel 
base  which  will  float  on  water  producing  light  all  around  a life  raft  or  downed  aircraft.  A potential 
exists  for  development  of  a pencil  in  a wax  base  or  a marker  which  may  be  used  to  write  on  surfaces  in 
light.  It  is  possible  that  the  American  Cyanamid  2-liauid  system  can  be  packaged  in  a two-compartment  aero- 
sol container,  activation  of  which  could  produce  a cloud  of  light  in  the  air.  Many  of  these  potential  uses 
are  under  current  investigation  and  development.  "Liqui -Light"  is  presently  being  manufactured  and  sold, 
for  example,  for  a wide  variety  of  uses.  Lasting  a minimum  of  3 hours,  it  is  advertised  as  being  "more 
safe  than  candles  or  flares  and  more  sure  than  flashlights,  Liqui-Light  won't  blow  out,  needs  no  batteries 
or  outside  energy  source  of  any  kind  that  could  fail,  does  not  spark  or  iqnite--el iminati ng  possible  ex- 
plosions— and  works  in  rain  and  even  under  water.  Small  and  lightweight  (only  6 inches  [15  cm]  in  length, 
weighing  less  than  1 ounce  [28  grams]) ...  Li qu i -Li gh t can  be  stored  for  two  years  without  losing  its 
effectiveness"  [General  Aviation  News,  1974  (1018)].  In  general,  chemo-i 1 1 umi nescence  formulations  pro- 
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ducing  the  highest  brightness  also  exhibit  the  shortest  duration.  And  the  longer  the  duration,  the  lower 
the  initial  brightness. 

Chemo-i 11 uminescence  was  evaluated  for  the  FAA  in  1968  [Roebuck  (15)]  and  it  was  concluded  that  "re- 
liability would  be  improved  100  percent"  through  use  of  this  concept  in  egress  path  marking  applications. 
Test  data,  properties,  and  characteristics  are  as  follows: 

The  light  output  is  a function  of  ambient  temperature,  the  humidity  of  the  activating  air,  and  the 
form  in  which  the  product  is  prepared.  Brightness  varies  from  65  foot-1 amberts  downward;  for  comparison, 
a 600-volt  electro-illuminescent  light  has  a brightness  of  about  20  foot-1 amberts.  Duration  of  useful 
light  output  ranges  from  5 minutes  to  4 hours. 

However,  Strongin  [1969  (1017)]  reported  emission  life  as  between  a few  minutes  and  2-3  hours,  with 
light  outputs  up  to  35  mi crol amberts.  The  light  spectrum  covers  the  entire  visible  range,  with  a peak 
in  the  vicinity  of  500  nanometers  wavelength  (blue-green).  It  requires  approximately  35  cc  (2.1  cu  in)  of 
air  at  atmospheric  pressure  to  completely  oxidize  the  active  chemical  in  6.5  sq  cm  (1  sq  in)  of  a "chemical 
light"  panel.  Light  output  ceases  after  complete  oxidation. 

(1)  Weight  of  "chemical  light"  devices:  6.5  sq  cm  (1  sq  in)  of  light  area  of  a panel  weighs 

approximately  1/2  gram  (.016  oz). 

(2)  Heat  generation:  It  is  cold  light,  and  is  not  subject  to  spontaneous  combustion. 

(3)  Light  stability:  Not  affected  by  exposure  to  visible  light. 

(4)  Storage  life:  In  its  sealed  container,  and  with  storage  temperature  below  48.8°  C (120°  F), 

"chemical  light"  can  be  stored  for  about  2 years. 

(5)  Chemical  compatibility:  It  is  compatible  with  inert  materials  such  as  saturated  hydrocarbons , 

nylon,  teflon,  mylar. 

(6)  Toxicity  of  active  ingredient:  The  amount  of  exposure  to  the  active  chemical  which  will  occur 

with  normal  use  of  a "chemical  light"  device  will  have  no  harmful  effect.  However,  if  a large  quantity 
of  the  active  chemical  contained  in  such  a device  is  ingested,  or  placed  on  the  skin  or  in  the  eyes,  and 
allowed  to  remain  for  a long  period  of  time,  or  if  a concentration  of  its  vapors  is  inhaled  for  a long 
period  of  time,  mild  temporary  irritation  may  occur.  Irritation  can  be  avoided  by  washing  out  the  chemical 
(or  inhaling  fresh  air)  immediately  after  such  overexposure. 

(7)  Testing  of  chemical  light  devices:  It  is  not  necessary  to  turn  on  a "chemical  light"  device  to 
determine  whether  it  is  in  operating  condition.  A "passive"  check  can  be  made  with  ultraviolet  light. 

(8)  The  characteristics  which  make  "chemical  light"  useful  in  solving  unusual  lighting  problems  are 
the  following: 

(a)  Unlimited  variety  of  shapes  and  sizes  in  flexible  or  rigid  form. 

(b)  Requires  no  power  supply. 

(c)  Isolated  system;  submersible. 

(d)  Long  standby  1 ife. 

(e)  Lightweight  and  unbreakable. 

(f)  Reuse:  requires  replacement  of  sealed  bags.  The  check  for  capability  to  light  is  inex- 

pensive--! t is  performed  by  exposing  to  ultraviolet  lamp. 

(g)  Duration:  can  be  produced  for  variable  times,  sufficient  for  most  crash  egress  require- 

ments. 

(h)  Crashworthiness:  excellent. 

(i)  Toxicity:  No  toxic  effect  reported. 

(j)  Vision:  Greatly  improved. 

Chemical  light  could  also  be  useful  in  marking  emergency  evacuation  routes.  While  it  has  been  re- 
ported to  be  very  effective  in  increasing  visibility  under  conditions  of  darkness,  no  information  on 
visibility  under  smoke  conditions  has  been  noted. 

Reflective  arrows  which  indicate  passenger  direction  to  the  nearest  exit  have  been  suggested  as 
an  aid  to  emergency  egress  [Brown,  1969  (3)].  These  could  be  placed  on  the  cabin  walls  or  along  the 
aisles  on  the  floor.  However,  retrorefl ecti ve  materials  which  reflect  light  (they  do  not  glow  or  emit 
light)  are  only  useful  as  long  as  a light  source  is  available.  Such  arrow  markers  could  be  painted  with 
a fluorescent  paint  or  could  use  chemical  light  for  illumination  in  conditions  of  low  visibility.  Some 
air  carriers,  such  as  American  Airlines,  presently  use  arrows  and/or  rough  surfacing  on  the  top  of  the 
wings  adjacent  to  the  fuselage  for  emergency  egress. 

5.3  Electro-11  luminescence 


Electro-illuminescent  tapes  have  been  developed  which  may  be  applied  to  the  upper  surface  of  the 
escape  slides  or  used  to  outline  the  configuration  of  emergency  exits,  pathways,  etc.  In  electroluminescence, 
an  insulated,  phosphor-coated  panel  is  activated  by  an  electric  current  in  the  ranges  of  125  to  600  volts, 
although  400  volts  is  most  commonly  used.  It  has  been  used  for  dials  and  panels  but  not  extensively.  Dis- 
advantages of  the  electroluminescent  system  include  requirements  for  a relatively  high-voltage  energy  source 
and  problems  associated  with  failure  due  to  bending  the  tape  at  sharp  angles  when  slide  rafts  or  escape 
slides  are  packaged. 

5.4  Ultraviolet-Activated  Pathway  Systems 

These  systems  employ  a floor  covering  treated  with  an  ultraviolet-sensitive  material  which  is  acti- 
vated by  ultraviolet  radiation  sources,  or  utilize  an  ultraviolet  light  source  and  special  fluorescent 
spray  lacquer,  or  other  material  normally  not  visible  in  incandescent  light.  Evacuation  markings  could 
thereby  be  placed  on  floors,  walls,  seats,  or  emergency  egress  exits.  A patent  application  was  made  by 
Luminex,  Inc.,  Santa  Barbara,  California;  however,  there  is  insufficient  data  available  to  evaluate  this 
as  a potential  aisle  marker  system.  Evidently  this  concept  would  utilize  an  ultraviolet  collimated  (in- 
direct) light  source  with  battery  power.  Aspects  of  toxicity,  wear  resistance,  smoke  scattering  of  light, 
and  compatibility  with  other  strong  white  lights  are  unknown.  The  principal  disadvantages  are  the  relative 


113 


high  electrical  power  requirements  for  the  ultraviolet  sources  and  the  relatively  low  level  of  visible 
light  which  results.  This  level  of  light  may  be  rapidly  obscured  by  low  concentrations  of  smoke  in  the 
cabin.  Alternative  techniques  appear  to  offer  greater  improvements  at  this  time. 

5.5  Self-Luminous  Sources  (Tritium) 


Current  air  carrier  aircraft  utilize  self-luminous  exit  markers  which  employ  gaseous  radioactive  H3 
(tritium).  The  tritium  gas  is  sealed  in  a cerium  glass  envelope,  the  air  surface  of  which  is  coated  with 
a zinc  sulfide  phosphor  [McFadden  et  al.,  1965  (1020)].  Radioactive  bombardment  of  the  phosphor  produces 
visible  light.  This  assembly  is  embedded  in  a lucite  envelope,  and  since  tritium  is  primarily  a beta- 
radioactive  emitter,  there  is  no  detectable  radiation  at  the  surface  of  the  unit.  If  broken,  the  light 
tritium  gas  dissipates  into  the  atmosphere  very  rapidly.  It  is  postulated  that  for  an  individual  to  ab- 
sorb significant  quantities  of  radiation  from  such  a source,  the  individual  concerned  would  have  to  breathe 
the  gas  for  a number  of  hours  in  a very  confined  area. 

Self-luminous  sources  have  been  developed  for  life  rafts  to  aid  in  boarding  and  detection.  The 
principal  disadvantage  of  self-luminous  sources  is  the  relatively  low  level  of  illumination  provided  by 
the  system,  since  care  must  be  taken  not  to  exceed  the  allowable  quantity  of  tritium  as  permitted  by  the 
U.S.  Atomic  Energy  Commission.  A detailed  radiation  safety  analysis  has  been  made  and  published  in  the 
Federal  Register  (12  September,  1961)  prior  to  granting  of  a general  license  for  use  of  tritium  self- 
luminous  devices  in  aircraft  [AEC,  1962  (1019)].  Recent  developments  have  produced  units  with  double  the 
brightness  of  former  units.  Duration  of  luminescence  is  primarily  a function  of  the  half-life  of  tritium 
(12.6  years).  The  tritium  self-luminous  light  source  has  several  advantages.  It  is  very  reliable  and 
operates  continuously  since  no  external  mechanical  or  electrical  devices  are  required  for  its  activation, 
and  it  is  also  insensitive  to  environmental  extremes. 

5.6  Phosphorescent  Markers 

Phosphorescence  is  the  property  of  a material  to  emit  light  in  the  visible  spectral  range  after  all 
outside  excitation  of  the  material  has  ceased.  Phosphorescent  materials  which  are  exposed  to  a light  source 
(incandescent,  fluorescent,  sunlight,  etc.)  will  continue  to  glow  in  the  dark  for  extended  periods  of  time 
after  the  removal  of  the  light  source.  Such  materials  are  available  in  the  form  of  paint  or  plastic  film 
with  pressure-sensi tive  adhesive.  There  are  two  basic  types  of  phosphorescent  materials:  those  with  a 

blue  color,  which  contain  CaSnS  pigment  providing  a low  initial  glow  and  low  long  afterglow,  and  those  with 
a green  color  which  contain  ZnS  pigment  and  characteristical ly  provide  a high  initial  glow  and,  in  some 
types,  a long  low  afterglow.  The  paints  have  been  used  in  some  aircraft  dials  and  vinyl  pressure-sensi ti ve 
signs  have  been  used  in  some  air  carriers  [Strongin,  1969  (1017)].  They  can  be  used  on  exit  signs  in  case 
of  a power  failure,  but  are  dependent  upon  prior  excitation  by  an  independent  light  source. 

5.7  Incandescent  Sources 


Incandescent  sources  are  used  extensively  for  general  cabin  illumination,  specific  illumination  level 
requirements  for  aisles,  as  well  as  over  emergency  exit  signs  and  for  spot  illumination  near  exits.  Most 
of  these  systems  utilize  rechargeable  batteries  at  each  source.  These  batteries  are  tripl e-charged  by  the 
aircraft  electrical  system  and  are  activated  by  the  drop-out  switch  upon  failure  of  the  main  aircraft  sys- 
tem. The  inertial  switching  system  is  no  longer  utilized  extensively  in  air  carrier  aircraft.  Incandescent 
sources  are  also  utilized  to  illuminate  escape  pathways  on  the  wing  by  installation  of  light  fixtures  in 
the  rear  junction  with  the  wing.  Incandescent  fuselage-installed  light  sources  are  used  to  meet  require- 
ments for  illumination  of  the  escape  slide  and  the  ground  at  the  end  of  the  slide.  Small  wiring  harnesses 
utilizing  miniature  "wheat  bulbs"  were  developed  which  may  be  affixed  to  the  upper  surfaces  of  the  escape 
slide  in  order  to  illuminate  them  and  to  define  the  geometry  limits  and  attitude  of  the  slide. 

To  penetrate  a concentrated  smoke  environment  a higher  initial  brilliance,  with  less  duration  (10 
minutes),  would  seem  an  improved  tradeoff  for  current  lower  brilliance  with  30  minutes  duration.  There 
has  been  disagreement  among  experts  in  this  area. 

5.8  Gaseous  Discharge  Systems 

Xenon  strobe  lights  oowered  by  small  batteries  have  been  developed  and  extensively  utilized  as  survi- 
vor locator  lights.  In  general  these  lights  emit  approximately  100,000  illumins  per  flash  at  a rate  of 
50  to  60  flashes  per  minute.  Small  units  emitting  approximately  1 million  illumins  per  flash  have  been 
developed  for  use  on  life  rafts.  This  type  of  unit  was  evaluated  in  the  FAA  crash  tests  of  transport  air- 
craft units  carried  out  in  Phoenix,  Arizona  in  1965  (1021,  1022).  The  unit  was  installed  at  the  emergency 
exits  as  an  aid  to  locating  the  exits  from  the  outside  of  the  aircraft  during  a rescue  operation.  It  was 
noted  that  even  after  the  exits  had  been  covered  with  about  5 cm  (2  in)  of  water  foam,  the  flash  of  the 
strobe  light  was  clearly  visible  through  this  material  even  under  bright  desert  sunlight  conditions. 

5.9  Floor-Level  Lighting 

Emergency  evacuation  environments  involving  degraded  visibility  due  to  smoke  or  darkness  suggest  that 
floor-level  lighting  could  decrease  egress  time,  since  smoke  least  obscures  the  area  of  the  floor.  This 
type  of  lighting  could  be  battery  powered  and  automatically  energized  in  case  of  loss  of  the  main  power 
supply,  or  could  be  activated  manually  by  the  crew.  If  lighting  consisted  of  floor-level  flood  lighting, 
fluorescent  or  incandescent  lamps  could  be  mounted  on  walls  or  seats  to  illuminate  aisles  or  exits,  or 
electroluminescent  lamps  could  provide  illumination  for  pathway  markings.  Due  to  the  variable  cargo/pas- 
senger configurations  in  military  type  aircraft,  such  a system  might  not  be  as  practical  for  military  as 
for  standard  civil  air  carrier  aircraft. 
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5.10  Directional  Aisle  and  Evacuation  On-Off  Lights 

In  this  system  progressive  on-off  timed  lamps  give  an  impression  of  movement  (similar  to  segmented 
automobile  turn  signals,  neon  outdoor  advertising  signs,  or  runway  landing  light  systems)  which  are  in- 
tended to  catch  the  passengers'  attention  and  direct  them  toward  emergency  exits.  The  lamps  could  be  lo- 
cated on  the  ceiling,  the  side  of  the  fuselage,  the  sides  of  aisle  seats,  or  in  other  locations  where  they 
would  be  most  visible  during  emergency  evacuation  conditions.  This  system  reportedly  has  the  capability 
to  increase  exit  and  egress  route  visibility,  distribute  passengers  to  various  exits,  and  to  thereby  pro- 
vide for  optimum  evacuation  flow. 

This  concept  could  be  manually  operated  by  the  crew  or  used  in  automatic  mode.  Crew  control  panels 
would  consist  of  on/off  (each  unit),  directional  control  (each  unit),  test  control,  and  manual  override. 

This  permits  the  crew  to  manually  control  the  initiation  of  the  system  and  to  control  the  direction  of 
the  signal  for  control  of  passenger  flow.  This  also  allows  the  crew  to  test  the  system  or  use  it  as  part 
of  the  preflight  briefing. 

For  automatic  operation,  the  system  could  be  equipped  with  sensors  which  detect  conditions  requiring 
evacuation  (g-load  or  heat)  and  unusable  exit  conditions  (heat,  structural  deformation).  Thus,  the  sys- 
tem would  activate  upon  detection  of  excessive  impact  or  fire  and  then  select  proper  directions  to  primary 
exits.  For  example,  by  using  heat  sensitive  sensors,  lights  near  a burning  area  would  not  activate,  leaving 
only  pulsating  lights  in  a non-fire  area. 

The  directional  signals  could  be  located  on  the  walls,  possibly  along  the  molding  or  luggage  racks, 
as  well  as  on  the  ceiling  and  floor,  which  would  make  them  conspicuous  even  during  conditions  of  poor 
visibility  or  abnormal  aircraft  attitude.  Another  possible  use  of  directional  signals  would  be  in  airport 
terminals  where  the  signals  could  function  both  to  orient  and  direct  boarding  passengers.  The  directional 
signals  can  be  composed  of  standard  lamps  or  electroluminescent  material.  The  latter  would  permit  in- 
stallation in  a more  inconspicuous  manner  until  actuated.  The  lamps  would  momentarily  illuminate  pro- 
gressively toward  the  preferred  exit,  thereby  serving  both  as  directional  indicators  and  exit  locator  aids. 
The  intensity  and  flash  rate  of  the  lamps  could  be  such  as  to  permit  the  perception  of  movement  and  to  en- 
sure visibility  in  expected  degraded  visibility  conditions.  These  magnitudes  would  have  to  be  selected  by 
laboratory  tests.  It  has  been  proposed  that  a slower  flash  rate  could  be  used  for  boarding  and  deplaning 
under  normal  conditions  than  would  be  used  for  the  emergency  conditions. 

All  of  the  components  of  this  concept  are  within  the  current  state-of-the-art.  Although  no  readily 
adaptable  units  have  been  identified  as  available,  no  development  difficulties  are  evident.  Maintenance 
and  repair  costs  could  be  relatively  low  if  high-reliability  solid-state  timing  and  control  devices  are 
used.  Fail-safe  logic  for  circuitry  could  be  the  greatest  problem,  and  sensor  reliability  is  also  critical. 
A small  effect  on  aircraft  structure  and  interior  decor  is  foreseen,  but  space  requirements  are  negligible. 

This  pulsating  light  system  offers  a significant  increase  over  current  techniques  in  informational 
content,  both  as  to  exit  location  and  recommended  direction  for  egress.  The  selection  of  flash  rate  and 
intensity  is  important  for  effectiveness  in  evacuation  conditions  of  reduced  visibility  caused  by  darkness, 
smoke,  or  flame.  Electroluminescent  displays  would  require  careful  evaluation  in  this  regard.  The  capabili 
ty  for  manual  operation  by  the  crew  must  be  carefully  considered  to  ensure  operability  and  ability  to  cor- 
rectly select  displays  and  directions.  Factors  to  be  considered  must  include  determination  of  control  lo- 
cation, visibility  of  crew,  and  awareness  of  conditions  (external  fire  or  hidden  structural  damage)  which 
can  influence  the  capability  to  operate  the  system.  For  these  reasons,  the  proposed  system  should  be  pri- 
marily designed  for  automatic  operation. 

An  evaluation  of  this  system  for  the  FAA  was  conducted  by  North  American  Rockwell  [Roebuck,  1968  (15)] 
and  at  that  time  it  was  concluded  that  such  a system  would  provide  a significant  improvement  in  passenger 
emergency  evacuation  flow  under  a variety  of  egress  conditions.  It  was  considered  to  be  compatible  with 
existing  systems,  and  estimated  that  in  cases  of  exit  blockage  or  crowding  this  concept  could  improve  flow 
by  10$  or  30%  "in  situations  requiring  redirected  flow." 

5.11  Tactile  Aisle  Markers 


The  purpose  of  tactual  indicators  is  to  provide  a means  of  directional  identification  of  emergency 
exit  locations  and/or  equipment  under  conditions  in  which  visual  cues  are  not  available.  Such  markers  need 
rely  on  only  the  sense  of  touch.  Other  advantages  over  other  path  marker  concepts  are  that  tactile  indica- 
tors would  be  available  no  matter  what  the  aircraft  attitude,  and  are  independent  of  any  power  requirements 
or  environmental  conditions.  Markers  could  be  placed  on  the  floor  (to  provide  directional  information), 
the  ceiling  (for  situations  when  the  aircraft  is  in  an  inverted  attitude),  the  sides,  backs,  or  tops  of 
seats,  or  on  the  walls  (to  locate  emergency  equipment).  Such  indicators  could  be  located  to  provide  a con- 
tinous  source  of  cues  from  any  seat  position  to  exits  or  emergency  equipment. 


Limited  research  and  development  has  been  done  on  this  concept.  The  idea  has  been  advanced  occasional 
ly  in  the  literature  (Aviation  Week  and  Space  Technology,  1966),  and  description  of  the  concept  was  included 
in  the  FAA  evaluation  of  emergency  evacuation  concepts  [Roebuck,  1966  (15)].  From  this  report  the  following 
tactual  indicators  were  suggested: 


(a)  Wire,  cord  or  other  runners  with 

periodic  direction  indicators  (arrows) 

-o — o — o 


Particularly  useful  on  ceiling  where  the 
possibility  of  interference  with  egress 
is  minimal.  Technique  allows  continuous 
and  therefore  very  rapid  use. 


4 FT 


115 


(b)  Raised  buttons  or  beads  with 
pointed  sides  indicating  direc- 
tion, or  periodic  arrow. 


Q O O ^ 

— f6"  r— 


(c)  Series  of  directional  arrows 
raised  to  provide  a tactual 


(d)  Grids  or  other  special 
tactual  indicators. 


(e) 


(f) 


Raised  numerical  indicators. 


O) 


o 

o 

o 

o 

o 

o 

o 

o 

o 

Raised  name,  symbols,  or 
abbreviation  indicators. 


This  technique  is  particularly  useful 
on  floor  areas  for  crawling,  or  where 
continuous  hand  contact  can  be  main- 
tained and  where  minimum  disturbance  of 
surface,  carpet  or  upholstery  is  re- 
quired. 


These  are  similar  to  technique  (b). 
Potentially,  they  could  be  combined 
with  ultraviolet  indicators,  should 
such  a system  be  evaluated  and  de- 
veloped, to  ensure  quick,  reliable 
utilization. 


These  are  useful  in  indicating  arrival 
at  exit  or  equipment  location  - also 
useful  on  top  of  seat  to  indicate 
aisle  with  exit.  These  would  be  selec- 
ted shapes  which  have  been  proven  un- 
ambiguous. 


This  technique  could  be  useful  to 
indicate  number  of  feet,  steps,  or 
seats  to  equipment  or  exit. 


This  technique  could  be  useful  to 
indicate  what  is  at  end  of  series 
of  tactual  indicators. 


(first  aid  kit) 


(life  raft) 


The  tactual  system  would  be  designed  as  a backup  system  to  the  visual  displays  utilized  for  emergen- 
cy egress.  It  would  be  most  useful  where  visual  cues  are  lacking,  for  example,  at  night  with  no  emergency 
lighting,  or  in  conditions  of  heavy  smoke.  Since  it  would  be  a passive  system  however,  it  is  preset  and 
could  be  in  conflict  with  other  than  normal  egress  patterns  when  passengers  must  be  redirected.  In  this 
particular,  limited  situation  it  might  actually  slow  down  evacuation.  The  concept  was  rated  as  having 
very  good  cost  effectiveness  and  was  estimated  as  improving  chances  for  survivability  by  50%  in  cases  where 
poor  visibility  influences  emergency  egress. 


The  Aerospace  Industries  Assocation  reported  tests  of  the  use  of  tactile  aids  for  locating  exits 
during  adverse  visual  conditions.  These  tests  were  conducted  by  Douglas  Aircraft  Company  in  1967  [Oden 
and  Altman  (1023)].  Fourteen  subjects  were  tested  individually  under  smoke  conditions,  using  the  accuracy 
of  the  direction  indicated  and  latent  response  criteria  to  evaluate  eight  different  tactile  shapes.  These 
forms  were  evaluated  for  two  different  thicknesses,  3.2  mm  and  6.4  mm  (1/8  and  1/4  in).  Thus  16  different 
test  conditions  were  evaluated.  The  tactile  cues  used  in  these  tests  are  illustrated  in  Fig.  82a.  The 
experimental  design  required  the  subject  to  place  his  left  hand  into  a box  that  held  the  plywood  tactile 
form  and,  by  feeling  this  form,  indicate  its  direction.  This  was  done  as  rapidly  as  possible  by  turning 
a knob  on  a display  board  at  the  top  of  a box  with  the  right  hand  and  subsequently  pressing  a button  to 
shut  off  the  timing  device.  None  of  the  tactile  forms  in  the  box  were  visible  to  the  subject. 

Results  of  these  tests  indicated  that  the  teardrop-shaped  (13-16)  and  elongated-triangle-shaped  (5-8) 
forms  were  significantly  better  shapes  with  which  to  indicate  direction.  This  result  was  evidenced  by 
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quicker  response  times,  significantly  fewer  errors,  and  fewer  reversal  errors  (180°  out  of  phase).  The 
thickness  variation  (3.2  mm  to  6.4  mm  [1/8  to  1/4  in])  made  no  difference,  but  a subject  preference  was 
indicated  for  larger  forms.  The  5 cm  (2  in)  elongated  triangle  was  recommended  as  the  best  tactile  form 
tested.  However,  when  groups  of  people  were  tested  under  evacuation  simulation,  it  was  found  that  tactile 
cues  were  relatively  ineffective.  Subjects  used  them  infrequently,  preferring  to  hold  onto  the  person 
ahead,  and  additional  time  was  lost  in  using  them. 


Fig.  82a.  Shapes  of  1/8  and  1/4  inch  tactile  cues  used  in  AIA  tests  (1023). 


5.12  Other  Considerations  and  Requirements 


In  some  accidents  it  has  been  found  that  crowding  may  occur,  with  disastrous  results,  when  too  many 
people  try  to  use  the  same  exit.  This  has  been  reported  in  several  accidents,  including  the  1974  Pan 
American  Boeing  707  accident  at  Pago  Pago  (276),  the  United  McDonnell  Douqlas  DC-8  accident  at  Denver 
(397,  424),  and  in  one  military  Boeing  C-135  accident  with  11  fatalities  (22).  Aisle  blockage  has  been 
reported  to  have  hindered  emergency  egress  in  the  1973  Iberian  McDonnell  Douglas  DC-10  accident  at  Logan 
Airport  where  5 passengers  were  trapped  in  the  rear  (275),  and  the  1973  Delta  McDonnell  Douglas  DC-9 
crash  at  Chattanooga  (274).  It  is  also  observed  in  the  numerous  instances  where  only  a few  of  the  available 
exits  are  used,  such  as  in  the  McDonnell  Douglas  DC-8  military  charter  crash  at  Anchorage  (209).  Thus, 
directional  aisle  marking  systems  should  consider  the  distance  to  the  nearest  exit. 

In  1971  FAA  standards  were  put  into  effect  relative  to  emergency  lighting  under  FAR,  Part  25.812 
(1025).  This  standard  on  emergency  lighting  systems  requires,  independent  of  the  main  lighting  system, 
inclusion  of  emergency  exit  marking  and  locating  signs,  sources  of  general  cabin  illumination,  entrance 
lighting  in  emergency  exit  areas,  and  interior  emergency  lighting.  Each  passenger  exit  sign  and  each  exit 
locating  sign  must  have  white  letters  at  least  2.5  cm  (1  in)  high  on  a red  background  at  least  5.1  cm  (2  in) 
high,  which  can  be  internally  electrically  illuminated,  or  illuminated  by  other  than  electrical  means  with 
an  initial  brightness  of  at  least  160  microlamberts.  The  average  illumination  along  the  center  line  and 
the  aisles  at  101  cm  (40  in)  intervals  must  not  be  less  than  0.05  foot-candles.  The  passageway  floor  lead- 
ing to  the  emergency  exit  must  be  lighted. 

In  addition,  exterior  emergency  lighting  must  be  provided  with  illumination  not  less  than  0.02  foot- 
candles  at  first  step  outside  cabin,  not  less  than  0.05  foot-candles  for  a .6  m (2  ft)  width  along  30% 
of  the  slip-restraint  escape  route  that  is  farthest  from  the  exit,  illumination  of  at  least  0.02  foot- 
candles  on  the  ground  surface  at  each  overwing  exit  (with  gear  extended),  and  illumination  of  not  less  than 
0.03  foot-candles  at  the  ground  from  each  non-overwing  emergency  exit.  This  FAR  further  specifies  that  the 
energy  supply  to  each  emergency  lighting  unit  must  provide  the  required  level  of  illumination  for  at  least 

10  minutes.  In  case  of  a crash  landing  where  the  fuselage  has  separated,  the  emergency  lighting  system 

must  be  designed  so  that  "after  any  single  vertical  separation"  not  more  than  25%  of  all  emergency  lights 
are  rendered  inoperative.  Emergency  slide  lighting  is  excluded  from  these  requirements,  but  must  serve 
one  slide  only,  be  independent  of  the  main  emergency  lighting  system,  and  be  automatically  activated 
(Amendments  25-28;  25  September,  1971). 

The  FAA  at  present  has  no  aisle  and  evacuation  path  marker  requirements  as  such  for  civil  air  carriers. 
However,  FAR  airworthiness  standards  for  transport  category  airplanes  [Part  25.811  (1024)]  require  emer- 
gency egress  markings  for  exits  which  have  several  related  items.  Part  25.811(b)  states  that  "the  iden- 
tity and  location  of  each  passenger  emergency  exit  must  be  recognizable  from  a distance  equal  to  the  width 

of  the  cabin."  If  applied  to  the  military  Boeing  C-135A,  this  distance  would  be  3.3  m (10  ft,  9 in),  or 
little  more  than  three  rows  of  passenger  seats.  This  appears  to  be  completely  inadequate,  especially  due 
to  the  distance  between  emergency  exits.  For  example,  on  the  left  side  of  the  passenger/cargo  area  of 
the  military  configuration,  there  is  over  13.7  m (45  ft)  distance  between  the  rear-most  passenger  position 
and  the  left  overwing  escape  hatch.  It  is  very  difficult  at  present  to  visually  see  exit  signs  and  direc- 
tions unless  the  passenger  is  seated  adjacent  to  an  exit  area,  or  has  been  carefully  briefed. 

Society  of  Automotive  Engineers  Aeronautical  Recommended  Practice  for  emergency  placarding  [ARP 
577A,  1963;  3.3.3  (1027)],  in  contrast,  suggests  that  emergency  exit  "instructions  should  be  legible  from 
a minimum  distance  of  72  inches  [183  cm]  within  a subtended  angle  of  at  least  45°...".  This  appears  to 
be  one  of  the  few  instances  in  which  an  SAE  recommendation  may  be  exceeded  by  an  FAA  requirement  (for 
larger  aircraft).  ARP  503B  (published  July,  1971)  (1028)  relates  to  emergency  illumination;  however, 
civil  requirements  differ  from  those  of  military  standards  (as  specified  in  MIL-L-6503  and  MI L-A-251 65 ) . 
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Civil  emergency  exit  marking  is  specified  in  FAR  25.812.  Military  specification  MIL-A-25165  B(ASG)  con- 
cerning identification  of  aircraft  emergency  escape  systems  does  not  specify  a distance  or  visual  angle 
at  which  emergency  exit  identification  must  be  seen  by  the  passenger,  although  letter  size  is  specified 
(3.8.2)  as: 

"Size  - 'EMERGENCY  EXIT'  signs  inside  the  aircraft  shall  be  preferably  2 inches  high  [5.1  cm].  The 
lettering  of  instructions  shall  be  approximately  1 inch  [2.5  cm]  high  where  practicable,  and  shall  in  no 
case  be  less  than  1/2  inch  [1.2  cm].  'EXIT  RELEASE'  signs  on  the  exterior  of  the  aircraft  shall  be  at 
least  1 inch  [2.5  cm]  high."  Types  of  markers  mentioned  in  the  military  specification  include  the  use  of 
decal comani as , radioactive  luminous  markers,  reflective  markings  and  emblems,  but  specifies  that  radio- 
active paints  shall  not  be  used. 

In  the  Aerospace  Industries  study,  emergency  exit  signs  were  recommended  to  have  a brightness  high- 
to-low  contrast  ratio  no  greater  than  3 to  1 and  a background-to-1 egend  contrast  ratio  of  at  least  10  to 
1.  It  was  also  found  that  flashing  exit  signs  are  not  more  effective  [AIA,  1968  (1023)]. 

Improved  aisle  and  evacuation  markers  would  result  in  a marked  improvement  in  passenger  evacuation 
flow,  speed  egress,  and  reduce  post-crash  confusion.  Some  concepts  would  also  offer  a means  of  finding 
an  exit  where  no  vision  is  possible  (tactual)  or  where  smoke  or  darkness  have  reduced  normal  visual  cues 
(directional  pulsating  lights).  The  present  state-of-the-art  offers  several  feasible  and  practical  means 
for  greatly  improving  evacuation  through  improved  marker  systems.  Manufacturers  of  the  various  aisle  and 
emergency  egress  illumination  systems  discussed  in  this  section  are  listed  in  Appendix  F. 


6.  PASSENGER  WARNING  AND  PUBLIC  ADDRESS  SYSTEMS 


6.1  Background 

The  primary  purpose  of  passenger  and  crew  warning  systems  is  to  permit  either  the  aircraft  commander 
or  any  crew  member  to  inform  all  other  crew  members  and  passengers  instantly  and  simultaneously  of  an 
existing  or  impending  aircraft  evacuation. 

Alarm  warning  experience  in  civil  air  carriers  is  difficult  to  evaluate  and  has  been  varied.  Crashes 
during  landing  or  takeoff  phase,  when  pilots  are  fully  occupied  with  crew  duties,  often  occur  suddenly  and 
preclude  activating  an  alarm.  The  1971  crash  of  the  MAC  charter  McDonnell  Douglas  DC-8  aircraft  operated 
by  Capitol  International  Airways,  during  an  attempted  takeoff  in  freezing  rain  at  Anchorage,  Alaska  is  a 
case  in  point  (209).  More  puzzling  are  cases  where  the  alarm  system  is  not  used  when  there  is  adequate 
time  for  preparation.  The  ditching  of  the  Dutch  Antillian  Airlines  McDonnell  Douglas  DC-9  in  the  Caribbean 
Sea,  for  example,  was  anticipated  by  the  captain  far  in  advance  of  the  actual  event  (10,  11,  12,  485).  Al- 
though he  instructed  the  purser  to  brief  the  passengers  for  a possible  ditching  10  minutes  prior  to  the 
actual  impact,  no  further  warning  or  alarm,  visual  or  aural,  was  given  prior  to  the  ditching.  This  re- 
sulted not  only  in  many  unrestrained  and  unprepared  passengers,  but  even  the  crew  was  unprepared,  with  the 
navigator  and  purser  both  being  unrestrained  at  impact. 

Deficiencies  in  the  passenger  warning  system  were  evident  in  this  St.  Croix  McDonnell  Douglas  DC-9 
transport  crash,  and  further  studies  have  been  spurred  as  a result.  In  this  accident  the  regular  public 
address  system  became  inoperative  prior  to  impact,  and  some  passengers  were  still  standing  up  while  donning 
emergency  equipment  at  the  time  of  impact.  Because  no  one-minute  warning  was  received,  many  passengers  un- 
doubtedly received  injuries  which  might  have  been  prevented  with  an  adequate  emergency  signal  system. 

As  a result  of  three  years'  study,  the  FAA  has  adopted  a new  rule  after  an  NPRM  (No.  72-6)  was  issued 
in  early  1972.  The  new  regulation  became  effective  8 September,  1973,  but  gave  operators  two  years  (to 
8 September,  1975)  to  comply  [FAA,  1973  (1031)].  This  regulation  requires  air  carriers,  air  travel  clubs, 
and  air  taxi  operators  to  have  electronic  public  address  and  interphone  systems  on  all  aircraft  operated 
with  more  than  19  passenger  seats.  Previously  there  had  been  no  FAA  requirement  for  public  address  and 
interphone  systems,  nor  any  requirement  that  they  be  operational  when  installed. 

Under  the  1973  regulation  the  public  address  system  must  be  accessible  for  immediate  use  by  flight 
crew  members  on  the  flight  deck  and  at  least  one  flight  attendant  in  the  passenger  compartment.  The  system 
must  be  clearly  audible  throughout  the  aircraft.  The  interphone  must  be  operable  independent  of  the  public 
address  system  and  must  provide  two-way  communication  between  the  flight  deck  and  at  least  one  flight  atten- 
dant station.  In  addition,  the  1973  (1975)  FAA  regulation  requires  that  the  interphone  system  on  large 
turbojet  aircraft  contain  an  alerting  system,  incorporating  both  aural  and  visual  signals,  to  notify  the 
recipient  of  an  impending  emergency  or  normal  call.  The  interphone  system  must  also  provide  communication 
between  ground  personnel  and  at  least  two  flight  crew  members  and,  separately,  between  ground  personnel  and 
at  least  one  flight  attendant.  Both  the  public  address  and  interphone  systems  must  now  be  operational  at 
the  time  of  takeoff.  At  present  both  the  McDonnell  Douglas  DC-10  and  the  Lockheed  L-1011  have  excellent 
evacuation  signal  systems. 

The  alarm  system  currently  utilized  in  military  transport  aircraft  is  manually  activated  from  the 
pilot's  station.  Normally  this  consists  of  a guarded  toggle  switch  within  reach  of  the  pilot  or  copilot. 

HIAD  (AFSCM  80  80-1;  H.  4.3)  specifies  that  signal  lights  and  alarm  bells  be  installed  in  Air  Force  air- 
craft according  to  MIL-L-6503  and  international  military  standardization  programs  (A10.1.1).  Standard 
alarm  bell  signals  are: 

(11  Immediately  after  takeoff:  1 long  ring  - brace  for  impact. 

(2)  Inflight/crash  landing  or  ditching:  6 short  rings  - fasten  belts  securely,  1 long  ring  - brace 

for  impact. 

(3)  Inflight/bailout:  3 short  rings  - don  parachute,  1 long  ring  - bailout. 

(4)  On  the  ground:  3 short  rings  - prepare  to  abandon,  1 long  ring  - abandon  aircraft. 

Previous  evaluation  of  this  alarm  system  by  Reagin  et  al . [1970  (13)],  in  studying  emergency  escape 
from  USAF  transport  aircraft,  concluded:  "...the  use  of  the  emergency  alarm  bell  was  found  to  be  practically 
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worthless.  In  five  of  the  accidents  reviewed,  the  use  of  the  alarm  bell  was  a significant  factor.  It  was 
used  successfully  in  only  one  impending  accident  in  which  30  minutes  warning  time  was  available  for  prepara- 
tion of  the  landing.  In  two  cases,  the  alarm  bell  definitely  contributed  to  the  panic  of  passengers.  In 
another  case,  it  was  stated  that  it  was  used;  however,  the  surviving  passengers  did  not  recall  hearing  it. 
And  in  the  fifth  attempted  use,  only  two  rings  of  the  bell  could  be  accomplished  prior  to  impact.  In  the 
majority  of  the  accidents  where  the  alarm  bell  was  not  used,  time  and  the  priority  of  crew  duties  pre- 
cluded its  effective  use." 

In  the  1971  study  of  military  Boeing  C- 135  and  Lockheed  C-141  aircraft  accident  experience,  Snyder 
and  Robbins  found  that  the  alarm  bell  was  utilized  in  only  five  of  these  C-135  accidents;  however,  further 
analysis  indicates  that  only  ten  of  these  accidents  involved  a crash  landing  situation  where  an  alarm  bell 
would  have  been  expected  to  be  used  (21,  22).  Thus  in  Boeing  C-135  accidents  at  least,  the  alarm  bell  has 
been  used  in  approximately  50%  of  the  cases  where  a crash  landing  and  emergency  egress  were  imminent.  The 
major  reasons  for  non-use,  as  was  also  found  in  the  report  of  Reagin  et  al . [1970  (13)]  were:  (1)  lack  of 

sufficient  warning  of  the  impending  crash  event  and  (2)  the  crew's  occupation  with  controlling  the  air- 
craft at  a critical  point  in  the  flight  path.  In  two  cases  where  the  alarm  was  not  used,  the  crash  occurred 
on  landing  approach  and  was  totally  unexpected  by  the  pilots;  in  two  cases  the  crash  landing  occurred  during 
takeoff  with  insufficient  warning,  and  a fifth  case  involved  control  problems  requiring  the  pilot's  full 
attention . 

While  these  represent  only  a limited  number  of  accidents  involving  only  two  types  of  military  air 
transport  aircraft,  these  cases  do  suggest  that  the  alarm  bell  has  been  an  effective  device  in  the  parti- 
cular circumstances  where  used.  In  all  five  cases  the  alarm  bell  was  reported  to  have  been  heard  by  occu- 
pants and  was  the  primary  pre-crash  source  of  warning,  even  though  in  one  case  there  was  a communications 
fail ure. 

Besides  the  alarm  bell  used  by  the  Air  Force  and  most  civil  air  carriers,  other  techniques  proposed 
include  flashing,  stroboscopic,  and  continuous  light  warning  systems,  while  audible  public  address  systems 
include  warning  horns,  buzzers  and  bells,  as  well  as  verbal  public  address  systems  and  bullhorns.  In  the 
event  of  a false  alarm  or  averted  emergency  situation,  or  to  reduce  the  noise  and  panic  level  once  all 
occupants  have  been  warned  of  an  emergency,  a signal  of  some  kind  must  be  available  which  is  easily  dis- 
tinguishable from  all  other  fliqht  deck/cabin  signals  and  which  must  not  cause  panic  among  passengers. 

One  factor  which  may  skew  the  statistics  relates  to  crew  training.  In  a type  of  long-range  air 
transport  operation  where  accidents  are  rare  and  pilot  proficiency  in  emergency  procedures  is  also  com- 
paratively rare,  one  might  expect  less  use  of  an  alarm  system  when  a critical  crash  emergency  occurs  than 
in  another  command  or  mission  where  continuous  practice  of  engine-out  landings  or  emergencies  are  simulated, 
under  the  same  potential  crash  conditions.  Most  actual  emergencies  occur  during  takeoff  or  landing  phases 
of  flight  when  the  crew  is  busiest.  Thus  when  an  emergency  requiring  the  use  of  an  alarm  system  occurs, 
it  seems  possible  that  prompt  use  or  non-use  during  the  brief  time  prior  to  impact  may  well  vary  with  the 
particular  pilot's  proficiency  in  emergency  procedures. 

The  author,  aircraft  commander  of  a North  American  B-25J  (with  8 crew  aboard)  which  sequentially 
lost  both  engines  on  takeoff,  found  sufficient  time  existed  to  warn  all  passengers  with  the  bell  system 
prior  to  crash  landing  in  a farm  yard.  It  is  his  personal  opinion  that  crew  training  is  a critical  factor 
in  ability  to  successfully  use  any  emergency  warning  system.  While  one  might  expect  greater  proficiency 
in  emergency  procedures  among  military  aircrew  than  among  civil  crews,  for  whom  such  emergencies  may  be 
less  frequent,  unless  civil  air  transport  crews  are  subjected  to  frequent  training  involving  emergency 
procedures,  accident  experience  shows  about  equal  usage  (or  non-usage).  It  would  be  instructive  to  review 
current  alarm  bell  usage  in  both  civil  and  military  transport  accidents  in  greater  detail. 

Review  of  Federal  Air  Regulations  (Part  25;  Part  121)  revealed  no  specific  requirements  for  civil 
air  transport  aircraft  related  to  emergency  evacuation  signal  systems  prior  to  the  new  regulation  effective 
8 September,  1975,  except  as  related  to  the  bullhorn  (Part  121;  Part  309).  In  regard  to  this  equipment, 
the  FAA  only  requires  that  there  be  an  emergency  evacuation  signal  system  and  a statement  of  its  location. 
The  bullhorn  is  a portable,  battery-powered  lightweight  megaphone.  Fig.  shows  a typical  installation 
in  a civil  air  carrier  aircraft,  located  in  the  aft  section  at  the  end  of  the  overhead  storage  rack. 


Fiq.  83.  Typical  bullhorn  emerqency  public  address  system 
installation  in  civil  air  transport. 
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However,  a number  of  inquiries  to  SAE  committee  members,  stewardesses,  airline  safety  personnel,  and 
crews  have  not  resulted  in  identification  of  any  case  of  actual  emergency  egress  usage  of  the  portable 
emergency  bullhorn  carried  in  current  civil  air  transport  aircraft;  although  it  has  been  reportedly  used 
in  non-emergency,  non-stress  situations  when  the  cabin  communications  system  has  failed  in  flight. 

In  Aerospace  Industries  Association  (1968)  evacuation  tests  involving  audible  horn  cues,  the  horn 
was  ranked  as  least  effective  (behind  seat  placard,  voice  cue,  and  tactile  cue)  in  usage,  and  more  sub- 
jects (63%)  felt  their  way  out. 

6.2  Portable  Solid-State  Voice  Amplification  Devices 

Review  of  the  current  state-of-the-art  has  not  revealed  any  alarm  system  concepts  which  appear  to 
offer  significant  improvement  over  the  current  bell  alarm,  inadequate  as  it  might  be  in  its  dependence  upon 
manual  actuation.  The  North  American  Rockwell  study  for  the  FAA  [Roebuck,  1968  (15)]  explored  several 
systems.  One  concept  involved  use  of  a miniaturized  solid-state  voice  amplification  device  worn  about  the 
neck  by  cabin  crew  on  takeoff.  Two  advantages  were  that  it  was  instantly  ready  to  provide  independent 
communication  to  passengers  as  a lightweight  replacement  for  the  bullhorn,  and  it  freed  the  hands.  How- 
ever, it  is  of  no  use  until  the  individual  wearing  it  is  warned  from  the  flight  deck,  thus  does  not  solve 
the  problem  of  initiating  the  initial  alarm.  A modification  of  this  concept  was  the  idea  proposed  that 
all  crew  wear  miniaturized  solid-state  inter-communication  equipment  on  takeoff  and  landing.  In  this  con- 
cept a flip-up  microphone  and  head  set  would  be  connected  to  a long  cord  through  bulkhead  jacks  and  con- 
trol switches  at  intervals  of  2.4  to  3.6  m (8  to  12  ft)  apart.  Using  a battery  power  source  this  would 
provide  high-power  15.2  cm  (6  in)  public  address  speakers  at  3.6  m (12  ft)  intervals. 

6.3  TWA  Emergency  Evacuation  Signal  System 

For  several  years  Trans  World  Airlines  has  utilized  a combination  aural-visual  system  in  all  of 
their  aircraft.  The  TWA  Emergency  Evacuation  Signal  System  was  developed  by  TWA  and  is  described  by 
Ogilvie  [1968  (1032)].  Battery-powered,  the  audible  alarm  consists  of  2,800  cycle  tone  pulses  three  times 
per  second  and  of  90  db  intensity,  thus  differing  significantly  from  engine  noises  or  other  confusing 
sounds.  The  present  system  is  dependent  for  activation  on  the  pilot  alone,  although  the  original  system 
was  designed  so  that  it  could  be  activated  by  either  flight  deck  or  cabin  crew.  In  the  original  version, 
a red  light  and  solid-state  flash  provided  a visual  "EVAC"  signal  at  the  stewardess  station  to  warn  the 
stewardess  of  an  emergency.  This  was  to  warn  the  stewardess  but  not  the  passengers.  In  case  a cabin 
attendant  initiated  an  evacuation  the  captain  was  warned  by  a flashing  red  light  on  the  pilot's  panel. 

The  idea  behind  this  was  that  evacuation  may  be  initiated  by  either  cabin  or  flight  deck  crew.  However, 
the  cabin  initiation  portion  has  been  taken  out  of  the  system  after  several  recent  inadvertent  evacuations 
have  occurred;  in  at  least  one  case  passengers  received  egress  injuries.  Thus  the  current  system  remains 
a manually  activated  alarm  similar  in  concept  to  the  military  type,  except  for  the  tone  and  intensity. 
Adaptation  of  this  system  might  result  in  a more  readily  identifiable  alarm,  if  in  fact  accident  data  show 
that  the  current  alarm  has  not  been  heard  or  results  in  confusion  in  a significant  number  of  cases. 

6.4  Video  Tape  Presentation  of  Passenger  Safety  Information 

Video  tape  presentations  of  passenger  safety  information  normally  provided  by  flight  attendant  briefing 
and  safety  cards  have  been  found  to  be  very  successful  in  increasing  passenger  retention  of  vital  informa- 
tion. Development  of  video  techniques  has  primarily  resulted  from  long-term  efforts  by  the  McDonnell  Douglas 
Aircraft  Company  [Altman,  1975  (1035);  Johnson,  1973  (1037);  Johnson  et  al.#  1975  (1038)].  First  adopted 
by  Chrysler  Air  Transportation,  in  Gruiman  Gulfstream  G-2  corporate  operations,  the  system  is  presently 
used  by  American  Airlines  in  a video  tape  cassette  version  of  the  flight  attendant  safety  equipment  demon- 
stration on  its  McDonnell  Douglas  DC-10  equipment  [Aviation  Week,  1975  (1036)]. 

6.5  Conclusions 


While  no  off-the-shelf  device  currently  appears  ideal,  the  current  interest  of  the  FAA  in  development 
of  a better  PA  and  alarm  system  and  the  new  FAA  standards  (1973/1975)  implemented,  suggest  that  further 
improvements  in  the  state-of-the-art  may  be  forthcoming.  The  critical  need  for  a public  address  system 
for  evacuation  using  an  emergency  electrical  power  source  has  been  previously  expressed  by  both  Air  Force 
human  factors  reports  related  to  accident  investigation  and  civil  air  transport  researchers.  Video  tape 
presentation  of  passenger  safety  information  has  resulted  in  better  information  retention  than  flight 
attendant  briefings  using  information  cards  to  date,  and  should  receive  widespread  adoption  when  practical. 


7.  ADVANCES  IN  EMERGENCY  EGRESS  CONCEPTS 


7.1  Background 

Air  transport  accident  statistics  clearly  indicate  that  improved  methods  and  techniques  for  providing 
safe  and  reliable  emergency  egress  for  occupants  should  have  priority  consideration.  Problems  of  aircraft 
attitude,  physical  condition  of  passengers,  presence  of  smoke,  fumes  or  fire,  post-crash  physical  and  men- 
tal condition  of  aircrew,  aircrew  efficiency  and  training,  interior  configuration,  and  structural  damage 
in  the  crash  impact,  among  other  factors,  are  important  variables  affecting  speed  and  success  in  emergency 
egress.  A large  number  of  emergency  egress  studies  have  been  conducted  and  many  reported  [Dougherty,  1967 
(1039);  King  (1041-1047);  Jaglowski,  1966  (1040);  see  previous  references  cited  in  Section  2.2.2  - Ground 
Emergency  Egress].  These  have  ranged  from  studies  of  the  SST  [Garner  and  Blethrow,  1970  (391)]  and  Con- 
corde [Anstey  and  Brownbill,  1975  (421)]  to  general  studies  of  ground  vehicles  under  crash  conditions 
[Sliepcevich  et  al . , 1972  (1048)]. 

Development  of  new  materials  and  technology,  especially  for  the  space  program,  has  led  to  advances  of 
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particular  importance  in  solution  of  problems  of  air  transport  safety.  During  the  past  few  years  there 
have  been  efforts  to  develop  alternative  systems  to  improve  the  state-of-the-art  of  emergency  egress. 

The  objective  of  the  following  section  is  to  select  and  evaluate  industry  developments  and  advanced  con- 
cepts which  have  application  to  transport  aircraft.  Eight  different  types  of  mechanical  and  inflatable 
slide  or  slide/raft  systems  are  evaluated,  as  well  as  some  less  conventional  systems. 

Major  advances  have  been  made  in  the  development  of  high  energy  emergency  egress  systems,  which  have 
been  considered  by  the  FAA,  and  developed  and  tested  by  the  USAF  to  the  point  where  all  USAF  Lockheed  C-141 
air  transports  will  eventually  be  retrofitted.  The  ELSIE  (Emergency  Life-Saving  Instant  Exit)  System, 
originally  developed  by  Explosive  Technology  as  STEN  (Stored  Energy)  Passenger  Egress  System  in  1967,  has 
had  continuous  development  and  testing  over  the  past  8 years,  with  considerable  operational  experience  in 
a Convair  C-l 31 B test-bed  aircraft,  and  variations  installed  in  a Lockheed  AC-130E  aircraft  and  Lear  Jet 
business  jet.  Described  as  "at  least  two  orders  of  magnitude  faster  than  any  system  in  use  today  on  cargo 
or  passenger  aircraft,  either  military  or  civilian,"  the  ELSIE  System  appears  to  be  one  of  the  most  ad- 
vanced technological  developments  available  for  emergency  egress. 

Other  aspects  which  will  be  discussed  are  those  of  ablative  coating  for  exit  areas  and  the  use  of 
the  heat  shield  concept  developed  by  NASA  in  Apollo  research.  This  concept,  which  has  been  subjected  to 
actual  fuselage  fire  testing,  would  protect  the  passenger  compartment  by  a fire-retardant  shell  able  to 
protect  the  occupants  from  smoke,  toxic  fumes,  or  fire  long  enough  for  them  to  escape  safely  or  for  the 
fire  to  be  extinguished.  This  concept  is  based  upon  development  of  a lightweight  polyisocyanurate  foam, 
and  an  intumescent  paint.  When  exposed  to  heat,  the  intumescent  paint  expands  to  many  times  its  original 
thickness  and  insulates  the  surface  beneath  it.  The  thermal -protective  capabilities  of  these  materials 
are  based  upon  the  charring  ablative  chemistry  principles  developed  to  protect  astronauts  during  re-entry. 
This  is  effective  as  long  as  the  shell  remains  sealed  and  is  not  compromised  by  fuselage  breakup. 

Little  attention  has  been  given  to  the  possibility  of  successful  egress  from  and  survival  of  occu- 
pants in  air  transports  involved  in  catastrophic  structural  failure,  mid-air  collision,  or  other  situations 
in  which  there  are  currently  no  emergency  alternatives  to  destruction  of  the  aircraft  and  fatality  for 
occupants.  Of  four  systems  evaluated,  one  appears  to  be  technically  possible  and  utilizes  drogue  chute 
technology  available  for  helicopter  application. 

The  following  concepts  represent  alternative  means  of  approaching  emergency  egress  in  air  transport 
ai rc raft. 

7.2  Slide  Devices 


Emergency  egress  through  door  exits  presents  slightly  different  problems  than  through  overwing  exits, 
the  latter  method  involving  off-wing  egress  from  low-wing  transports.  A number  of  external  escape  concepts 
have  been  reviewed,  including  inflatable  stairs  and  slides,  ramps,  mechanical  stairways  and  tube  slides, 
hand-held  slides,  escape  ropes,  rope  ladders,  telescope  poles,  and  nets. 

7.2.1  Inflatable  Escape  Slides.  Inflatable  escape  slides  represent  the  best  current  operational 
device  in  use^  However,  while  inflatable  escape  slides  have  long  been  standard  equipment  on  civil  air 
carriers,  they  have  been  reported  used  on  only  three  air  transports  (Lockheed  C-l 21  , Douglas  C-9,  and  some 
Boeing  C-135  aircraft)  in  the  military  air  transport  inventory.  Canvas  slides,  rope  ladders,  and  escape 
ropes  still  predominate  operationally  in  military  air  transport  operations. 

7. 2. 1.1  Double-Lane  Slide.  The  double-lane  inflatable  slide  consists  of  two  single  slides 
side  by  side,  utilizing  a center  support  tube  common  to  both  sides,  and  inflatable  tube  side  rails.  This 
system  is  designed  to  provide  two-abreast  egress  utilizing  Type  A doors  and  allowing  double  lines.  To 
date,  exit  preparation  time  for  arming  and  deployment  is  about  10  seconds.  Egress  speeds  have  been  found 
to  utilize  slide  angles  of  between  35  and  50  degrees  while  angles  below  25  degrees  allow  the  slide  to  be 
used  as  a walkway  if  the  slide  incorporates  an  inflated  member  as  the  sliding  surface,  rather  than  a fabric 
web  type  used  on  many  current  slides.  Tests  by  AIA  have  shown  that  double-lane  inflatable  escape  slides 
provide  a uniform  egress  rate  of  108  passengers  per  minute  (1049).  Stowed  volume  is  approximately  1.4  cu 
m (51.1  cu  ft)  for  a 10.4  m (34  ft)  length,  45.8  kg  (101  lb)  weight,  and  16.3  kg  (36  lb)  inflation  system 
weight. 


7. 2. 1.2  Double  Escape  Slide  with  Center  Divider.  This  concept  was  proposed  by  McDonnell 
Douglas  [Roebuck,  1 968  JJsYJ "and  is  a modification  of  the  double  escape  slide  described  above.  In  this 
version  an  inflatable  semi-rigid  separator  "fence"  in  the  middle  of  the  slide  would  in  effect  provide  two 
adjacent  slides,  as  shown  in  Fig.  84.  The  advantage  of  this  would  be  to  prevent  persons  sliding  down  side- 
by-side  from  getting  entangled,  or  one  passenger  blocking  egress  from  both  sides.  The  primary  purpose  of 
the  concept  was  to  prevent  hesitation  caused  by  one  passenger  waiting  for  another  beside  him  to  get  well 
down  the  slide  before  jumping.  It  would  also  provide  an  additional  hand-hold.  Suggested  provision  for 
chemical  light  along  the  top  edge  of  the  dividers  would  provide  better  illumination.  The  inflatable  divi- 
der section,  while  increasing  weight,  storage  bulk,  and  inflation  capacity,  would  provide  additional  longi- 
tudinal rigidity.  It  was  estimated  that  this  would  improve  passenger  flow  rate  by  up  to  10  percent;  how- 
ever, no  tests  are  reported  to  confirm  this  estimate. 

7. 2. 1.3  Combination  Inflatable  Slide  and  Life  Raft.  With  the  introduction  of  the  wide-bodied 
jet  transports  a new  concept  relative  to  egress  on  land  and  survival  at  sea  has  been  utilized.  This  concept 
relegates  a dual  function  to  the  escape  slide.  Its  primary  function  would  remain  an  escape  slide  for  rapid 
land  evacuation  of  an  aircraft,  but  an  additional  capability  would  be  a flotation  device  or  life  raft  for 
ditching  at  sea. 

The  slide/raft  concept  appears  to  offer  distinct  advantages  from  logistics  and  maintenance  view- 
points, as  explained  below: 
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Fig.  84.  Double  escape  slide  with  center  divider  [Roebuck,  1968  (15)]. 


(1)  Elimination  of  requirements  for  interior  life  raft  stowage  compartments.  In  certain  seat  den- 
sity configurations  of  the  Boeing  747,  for  example,  20  to  23  twenty-five  man  life  rafts  are  required. 

(2)  Reduction  in  weight.  For  the  Boeing  747,  this  would  mean  elimination  of  some  20  twenty-five 
man  life  rafts,  weighing  81.6  kg  (180  lb)  each,  for  a potential  weight  saving  of  some  1,633  kg  (3,600  lb). 
However,  some  weight  is  gained  in  slide  redesign  and  enlargement  into  a slide/ raft  configuration. 

(3)  The  slide/raft  is  designed  to  be  deployed  outside  the  aircraft.  The  history  of  prior  aircraft 
ditchings  indicates  that  all  too  frequently  survivors  were  unable  (or  failed)  to  remove  and  deploy  life 
rafts  stowed  within  the  aircraft  cabin  before  the  aircraft  sank. 

(4)  Maintenance  and  inspection  of  the  slide/raft  system  only  is  required  as  compared  to  maintenance 
and  inspection  of  both  escape  slides  and  life  rafts. 

There  are,  however,  several  disadvantages  of  the  combination  slide/raft  concept: 

(1)  The  number  of  slide/rafts  is  limited  by  the  number  of  exits  at  which  a slide/raft  may  be  in- 
stalled. For  example,  in  one  military  Boeing  C-135  configuration,  there  are  only  two  main  cabin  or  cargo 
doors  which  could  accommodate  a slide/raft  combination.  Supplementary  interior  stowed  rafts  may  still  be 
required  in  some  instances.  (On  the  other  hand,  the  Lockheed  L-1011  for  example,  has  8 exits  which  can 
be  uti 1 i zed. ) 

(2)  Frequently  existing  slide  compartments  are  inadequate  in  volume  to  accommodate  slide/rafts  and 
their  inflation  systems. 

(3)  Existing  door  hinges,  structure,  and  exit  hardware  are  often  inadequate  in  design  to  support  the 
added  weight  and  volume  of  slide/raft  combinations. 

(4)  Lack  of  mobility.  Weight  and  volume  of  slide/raft  combinations  are  frequently  such  that  in  the 
event  that  an  exit  is  not  usable,  the  slide/raft  cannot  be  easily  transferred  to  a usable  exit  for  deploy- 
ment. Management  in  high  winds  or  rough  seas  may  be  difficult  in  raft  mode. 

(5)  High  numerical  occupancy.  Some  large  slide/rafts  are  designed  to  carry  in  excess  of  50  survivors. 
The  loss  or  malfunction  of  one  of  these  slide/rafts  would  have  the  same  effect  as  the  loss  of  two  twenty- 
five  man  rafts. 

Accidents  such  as  the  ONA  St.  Croix,  V.I.  McDonnell  Douglas  DC-9  ditching  in  which  none  of  the  five 
life  rafts  aboard  the  aircraft  were  successfully  deployed  and  some  thirty-one  of  the  survivors  utilized  an 
inflated  escape  slide  as  their  primary  flotation  device  have  appeared  to  accelerate  the  application  of  the 
si ide/raft  concept. 

Fabrication  of  current  slide/rafts  is  from  lightweight  high  strength  synthetic  fabrics  such  as  nylon 
and  dacron.  The  fabric  is  coated  on  both  sides  with  an  elastomeric  compound,  often  a polyurethane,  and 
seams  are  either  heat-sealed  or  are  cemented  overlaps.  Inflation  is  usually  by  a CO2  system;  however,  to 
date  there  are  no  FAA  requirements  relative  to  gas  emission  toxicity.  Inflation  systems  most  commonly 
utilized  are  of  the  high  ratio-air  aspirator  type.  High  pressure  cylinders  using  nitrogen,  ni trogen-C02» 
or  other  mixtures  of  gases  are  used  to  operate  the  aspirators.  Slide/raft  operating  pressures  vary  between 
.1  to  .25  kg/sq  cm  (1.5  to  3.5  psi)  depending  upon  the  design  and  configuration  of  the  slide/raft.  Manual 
or  self-erecting  canopies  are  normally  an  integral  part  of  the  design.  Some  canopies  for  example  are  con- 
nected to  one  of  the  tubes  and  at  some  later  point  in  time  following  deployment  small  valves  are  opened, 
inflating  capstans  which  erect  the  canopy.  Since  these  capstans  are  of  relatively  small  volume  the  pressure 
drop  in  the  main  tubes  is  not  significant. 

One  of  the  larger  slide/rafts  designed  for  the  McDonnell  Douglas  DC-10,  a double  lane,  7.9  m (26  ft) 
prototype,  was  evaluated  in  open  water  using  larger  boats  to  create  increased  wave  conditions.  Fig.  85 
illustrates  the  slide/raft,  designed  by  Pico.  A usable  seating  area  of  17.9  sq  m (193  sq  ft)  was  calculated 
for  this  configuration  raft.  The  raft  was  alternately  loaded  with  44  subjects  (.41  sq  m [4.4  sq  ft]  per 
subject),  55  subjects  (.33  sq  m [3.6  sq  ft]  per  subject),  and  66  subjects  (.27  sq  m [3.0  sq  ft]  per  subject). 
Under  these  conditions  the  slide/raft  exhibited  excellent  buoyancy  in  all  passenger  loadings.  Essentially 
rectangular  in  shape,  slide/rafts  tend  to  flex,  bend  and  follow  the  contour  of  a swell.  When  the  lower 
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tube  was  deflated,  freeboard  was  reduced  and  waves  induced  by  boat  action  at  times  introduced  water  into 
the  slide/raft;  however,  the  remaining  buoyancy  was  adequate  to  maintain  flotation  with  the  maximum  number 
of  occupants.  When  one  of  the  two  compartments  is  deflated  the  structural  rigidity  of  the  slide/ raft  is 
normally  reduced  with  the  two  sides  pinching  inward  reducing  the  total  apparent  surface  area  of  the  slide/ 
raft. 


Fiq.  85.  Combination  life  raft  escape  slide  recently  certified  for  civil 
air  carrier  use  on  the  McDonnell  Douglas  DC-10  (Photo  courtesy  E.B. 
McFadden,  FAA) . 


On  30  November,  1972,  open-sea  trials  were  conducted  by  the  Society  of  Automotive  Engineers  S-9 
Cabin  Safety  Committee  in  response  to  interest  in  the  new  generation  slide/raft  certified  for  use  on  the 
McDonnell  Douglas  DC-10  and  the  Lockheed  L-1011.  These  trials  involved  deployment  of  slide/rafts  from  a 
test  fixture  simulating  an  aircraft  fuselage  from  the  U.S.  Coast  Guard  Buoy  Tender  Planetree  approximately 
3. 2-4.8  km  (2-3  mi)  off  the  island  of  Oahu.  The  slide/rafts  used  in  these  tests  were  manufactured  using 
concepts  outlined  in  the  SAE  ARP  1146  "Combination  Evacuation  Slide/Life  Raft,"  and  in  accordance  with 
aircraft  manufacturers'  specifications  and  FAA  guidelines.  Tests  were  conducted  in  sea  conditions  with 
up  to  1.8  m (6  ft)  swells  and  up  to  24  km/h  (15  mph)  winds. 

Conclusions  from  these  tests  are  as  follows: 

(1)  The  automatic  availability  of  the  slide/raft  for  immediate  loading  is  a significant  improvement 
in  the  level  of  safety. 

(2)  The  slide/raft,  being  securely  attached  to  the  aircraft  structure,  greatly  simplifies  and  ex- 
pedites loading. 

(3)  The  slide/raft  installation  prevents  the  possibility  of  an  inverted  deployment  by  virtue  of  the 
nature  of  its  design. 

(4)  The  slide/raft  should  be  loaded  to  capacity  while  still  attached  to  the  aircraft.  In  certain 
sea  conditions  when  the  door  sill  height  is  above  water  level  it  may  not  be  possible  to  load  the  slide/ 
raft  to  rated  capacity  while  attached  to  the  aircraft. 

(5)  The  slide/raft  demonstrated  a capability  to  take  punishment  without  damage. 

(6)  For  use  in  ditching,  the  slide/raft  is  a great  advancement  in  the  state-of-the-art  for  emergency 
evacuation  over  other  conventional  slide  and  life  raft  units  [SAE,  1973  (1053)]. 

Additional  recommendations  were  that  the  slide/raft  be  loaded  while  attached  to  the  aircraft;  be 
disconnected  by  the  raft  commander  from  inside  the  slide/raft;  survival  equipment  be  stowed  next  to  the 
raft  commander  at  the  aircraft  end;  the  sea  anchor  be  manually  deployed  after  drifting  away  from  the  air- 
craft; pictorial  instructions  to  locate  the  emergency  equipment  be  used  where  practical;  and  consideration 
be  given  to  location  instructions  on  the  inside  of  the  canopy  and  top  of  the  tubes  (or  other  surfaces  not 
obscured  by  the  occupants'  sitting  posture)  where  practical  [SAE,  1973  (1053)].  A 1974  review  of  the 
human  factors  of  the  slide/raft  combination  by  Sirkis  et  al . (1052)  has  discussed  the  improvement  in  the 
state-of-the-art  represented  by  this  device.  In  September,  1972  the  FAA  approved  the  30-place  Pan  Avion 
(American  Safety  Flight  Systems,  Inc.)  life  raft,  the  largest  to  that  date.  It  was  subsequently  retro- 
fitted to  Eastern  Airlines  Boeing  727  aircraft  (1051).  Larger  50-place  systems  are  currently  in  use. 

Weight  is  an  important  factor.  A Lockheed  L-1011,  for  example,  utilizes  6 50-man  (Type  A)  slide/ 
rafts  with  a double  lane  (air  cruisers),  and  two  aft  (Type  I)  33-man  capacity  single  lane  slide/rafts. 

In  an  aircraft  this  size  if  slide/rafts  are  not  used  it  would  require  15  25-man  life  rafts.  This  weight 
(15  rafts  @ 56.8  kg  [125  lb])  each  or  850  kg  (1,875  lb)  can  be  saved  by  utilizing  the  slide/raft  combina- 
tion. The  single  lane  slides  and  slide/raft  combinations  range  in  length  from  approximately  4.96  to  8.84  m 
(13  to  29  ft),  and  5.79  to  10.4  m (19  to  34  ft)  for  double  lane  models.  Weight  is  about  2.99  to  4.46  kg/m 
(2  to  3 lb/ft)  to  which  the  additional  weight  of  safety  and  inflation  equipment  must  be  added.  To  illustrate, 
a 10.4  m (34  ft)  double  lane  slide  weighs  approximately  45.8  kg  (101  lb),  with  a stowed  volume  of  some 
.14  cu  m (5.1  cu  ft)  and  its  inflation  system  weighs  16.3  kg  (36  lb)  [Sirkis  et  al . , 1974  (1052)]. 
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Current  slides  and  rafts  are  manufactured  in  compliance  with  Technical  Standard  Orders  (TSO)  C69  and 
C70;  however  to  date  there  is  still  no  FAA  TSO  related  to  slide/rafts  (March,  1976),  although  one  has  been 
in  preparation  for  over  seven  years.  While  ARB  (United  Kingdom)  requirements  are  .27  sq  m (3  sq  ft)  per 
person  floor  area,  it  is  probable  that  the  U.S.  standard  will  be  .33  sq  m (3.6  sq  ft).  The  FAA  published 
a Notice  of  Proposed  Rule  Making  (NPRM  69-33,  FAR  25.853[b])  in  1969  stating  standards  for  slide/raft 
combinations.  In  this  the  FAA  considered  that  the  device,  wet  or  dry,  should  be  designed  to  be  capable  of 
handling  evacuees  at  a rate  of  at  least  60  persons/minute  for  single  width  and  120  persons/minute  for 
double  width  evacuations  for  a duration  of  70  seconds.  It  should  be  capable  of  operating  in  at  least  a 
40.2  km/h  (25  mph)  wind,  must  be  inflated  in  not  less  than  10  seconds,  and  75%  of  initial  nominal  opera- 
ting inflation  pressure  should  be  retained  for  24  hours.  In  regard  to  flammability,  the  FAA  is  considering 
upgrading  the  present  requirements  of  10.2  cm  (4  in)  per  minute  horizontal  burn  rate.  To  date  specific 
FAR  requirements  for  slide/raft  combinations  have  not  been  issued.  The  Society  of  Automotive  Engineers 
issued  an  Aerospace  Recommended  Practice  relating  to  combination  evacuation  slide/life  rafts  (ARP  1146) 
in  July,  1970  (1054),  and  to  survival  kits  for  life  rafts  and  slide/rafts  (ARP  1282),  published  in  July, 

1973  (1055). 

Current  accident  experience  indicates  that  emergency  egress  slides  do  not  always  function  to  provide 
safe  egress.  Several  accidents  have  demonstrated  failure  of  current  inflatable  slide  systems.  In  the  TWA 
Boeing  727  accident  in  December,  1970  at  St.  Thomas,  the  gear  collapsed  on  the  runway  and  the  aircraft, 
carrying  46  passengers,  two  infants,  and  a crew  of  7,  struck  a hillside  beyond  the  runway  at  55.6  to  74 
km/h  (34.5  to  46  mph)  (203).  The  fuselage  broke  into  three  sections.  One  slide  was  deployed  but  failed 
to  reach  the  ground  by  2 or  2.5  m (7  or  8 ft)  due  to  the  fuselage  attitude.  In  jumping  from  the  end  of 
the  slide  there  were  several  serious  injuries.  In  the  McDonnell  Douglas  DC-8  crash  at  Anchorage,  one 
slide  ended  in  a pool  of  burning  fuel  (402,  403).  Movies  taken  of  the  Boeing  747  evacuation  at  San  Fran- 
cisco on  30  July,  1971  show  the  escape  slides  being  blown  by  the  high  wind,  again  resulting  in  injuries 
(See  Fig.  14)  (191).  In  a subsequent  Northwest  Airlines  Boeing  747  accident  at  Miami  on  15  December,  1972 
(244;  411),  the  two  rear  escape  slides  were  unusable  due  to  the  tail-high  position,  and  one  evacuation  slide 
failed  to  inflate,  making  that  exit  also  unusable.  In  September,  1972,  a Trans  World  Airlines  Boeing  747 
evacuation  at  John  F.  Kennedy  International  Airport,  New  York,  resulted  in  80  injuries,  some  being  attribu- 
ted to  the  slides  (409,  411).  Passengers  were  blown  down  by  engine  exhaust  blast,  piled  up  at  the  bottom 
of  slides,  and  landed  on  a hard  taxiway  surface.  Three  of  the  slides  were  deployed  near  the  fire. 

It  was  previously  noted  (Section  2.2.2  - Ground  Emergency  Egress)  that  injuries  have  occurred  during 
compliance  tests  of  the  slides,  and  this  led  to  consideration  by  the  FAA  of  industry  proposals  that  evacua- 
tion compliance  testing  be  conducted  by  computer  simulation.  An  unpublished  study  of  the  Civil  Aero- 
medical  Institute,  FAA,  indicates  that  where  actual  crash/fire  emergencies  have  been  involved  (as  opposed 
to  other  emergency  evacuations)  current  slide  systems  are  not  as  reliable  a means  of  egress  as  they  are 
generally  considered  to  be.  Thus  improvements  in  the  state-of-the-art  appear  necessary. 

7. 2. 1.4  Inflatable  Tubular  Escape  Slide/Raft.  A different  concept  of  an  escape  slide/raft 
device  was  proposed  In  1968,  involving  an  ion  at able  tubuTar  structure  as  shown  in  Fig.  86  [Roebuck,  1968 
(15)].  In  this  version  flexible  joint  sections  of  the  tubular  escape  structure  would  be  designed  to  allow 
slide  egress  in  any  position,  including  from  an  inverted  aircraft.  Completely  enclosed  slides  have  not 
been  used  previously,  and  some  protection  from  smoke  and  flame  might  result.  On  the  other  hand,  an  enclosed 
slide  could  act  as  an  efficient  flue  if  fire  is  present,  which  might  shorten  survival  time.  Windows  of 
flexible  transparent  plastic  would  provide  light,  with  chemical  light  strips  inside  for  night  egress.  It 
could  be  used  as  a ramp  walkway.  The  floor  and  ceiling  (identical)  would  be  constructed  of  Goodyear  "air- 
mat"  material  with  capability  to  inflate  a 2.5  to  5.1  cm  (1  to  2 in)  thick  stiff  surface  by  auxiliary 
inflation  bottles  in  case  of  a very  shallow  angle  of  egress.  The  attached  end  is  extended  from  the  air- 
craft by  a tubular,  sliding  cable-restrained  bellows,  capable  of  universal  flexure  to  some  + 25  degrees  of 
arc,  and  torsion  to  about  + 30  degrees  of  arc.  The  bellows  articulation  would  be  a larger  version  of  the 
shoulder  joint  in  a space  suit  pressure  garment.  This  concept  was  reported  to  have  an  estimated  increase 
in  passenger  flow  rate  up  to  50%  in  ditching;  however,  if  compared  to  current  ditching,  life  raft  deploy- 
ment requirements  in  aircraft  such  as  the  Lockheed  C-141A  would  probably  be  considerably  greater. 


Fig.  86.  Concept  of  a combination  inflatable  escape  slide/life  raft 
[Roebuck,  1968  (15)]. 
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7. 2. 1.5  Exterior  Platform  Escape  Slide  Entry.  The  purpose  of  this  escape  slide  concept 
(Fig.  87)  is  to  reduce  a traffic-flow  bottleneck  at  the  emergency  exit  caused  by  psychological  reasons 
[Roebuck,  1968  (15)].  The  idea  here  is  to  get  the  passenger  out  on  the  wing  (low-wing  aircraft)  and  then 
utilize  conventional  inflatable  slides,  which  would  be  automatically  deployed  from  the  platform  package. 
This  concept  is  within  the  state-of-the-art  and  is  a modification  of  some  current  designs. 


Fig.  87.  Exterior  platform  slide  entry  for  overwing  escape  [Roebuck,  1968  (15)]. 


7.2.2  Slide  Inflation  Devices.  With  the  increasing  size  of  these  devices,  particularly  for  aircraft 
such  as  the  Boeing  747  (and  Lockheed  C-9),  and  the  need  for  greatly  increased  inflation  volume,  rapid  in- 
flation times,  increased  compactness,  and  less  weight,  the  need  for  improved  inflation  devices  has  been 
emphasized.  Many  current  inflation  systems  utilize  compressed  gas  stored  in  211  kg/sq  cm  (3,000  psi)  cylin- 
ders, however  if  used  in  the  larger  and  newer  systems  the  high-pressure  gas  supply  would  pose  both  storage 
capacity  and  increased  weight  problems.  This  has  led  to  the  development  of  cool  gas  generators  and  more 
efficient  aspirators  as  the  current  solution  to  providing  better  inflation  for  the  large  capacity  inflatable 
escape  devices. 

The  conventional  system  of  inflating  escape  slides  is  to  duct  high-pressure  gas  from  a gas  reservoir 
through  an  aspirator  and  into  the  slides.  The  aspirator  contains  a nozzle  that  expands  the  hi gh-pressure 
gas  to  below  ambient  pressure.  The  aspirator  casing  contains  doors  designed  to  open  when  the  pressure 
within  the  casing  body  falls  below  ambient  pressure.  Thus,  the  entering  air  is  entrained  by  the  expanding 
hi gh-pressure  gas,  and  the  resulting  mixture  fills  the  inflatable  escape  slide.  In  the  newer  cool  gas 
generator  system  the  high-pressure  gas  cylinder  is  replaced  with  a solid  propellant  charge  within  a gas- 
generating chamber  plus  a coolant  chamber.  When  ignited,  this  charge  generates  hot  gas  which  is  then  cooled 
by  one  of  several  alternate  methods  when  exhausted  into  a secondary  chamber.  The  resulting  cool  gas  is 
then  directed  to  an  improved  external  aspirator  and  subsequently  into  the  inflatable  device.  Fig.  88  shows 
the  cool  gas  generation  system  in  schematic  form. 


ESCAPE  SLIDE 


Fig.  88.  Cool  gas  generator  system  for  inflatable  escape  devices. 
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Three  types  of  gas  generator  systems  include  the  solid  coolant-solid  propellant-aspirator  system, 
the  liquid  coolant-solid  propellant-aspi rator  system,  and  the  liquid  coolant-solid  propellant-aspirator 
system.  In  the  solid  coolant  system  the  hot  gas  resulting  from  the  solid  propellant  charge  ignition  is 
passed  over  a catalytic  bed,  which  acts  as  the  coolant  agent,  and  the  resulting  cool  gas  drives  the  aspira- 
tor. Hardware  for  this  concept  is  still  in  development,  and  problems  in  gas  temperature  control  have  been 
reported.  Although  it  appears  to  be  a relatively  simple  and  easily  maintained  system,  this  cannot  be 
determined  until  tested.  It  also  may  be  relatively  costly.  In  the  gas  coolant  system,  a 211  kg/sq  cm 
(3,000  psi)  gaseous  nitrogen  mix  is  the  primary  coolant.  By  mixing  with  the  hot  gases  generated  by  the 
ignition  of  the  solid  propellant  charge  the  driving  gas  is  directed  to  the  aspirator.  It  has  been  indicated 
to  be  effective  over  a temperature  range  of  -40°C  (-40°F)  to  +71°C  (+160°F),  and  is  capable  of  inflating  a 
4.5  cu  m (160  cu  ft)  volume  to  a pressure  of  .09  kg/sq  cm  (1.4  psi)  in  approximately  8 seconds.  Its 
cooling  ability  comes  from  high-pressure  gas  expansion,  however,  weight  requirements  for  high-pressure  gas 
cylinders  may  be  relatively  high.  The  third  method  uses  a liquified  gas  as  a coolant.  The  hot  gas  genera- 
ted by  the  ignition  of  the  solid  propellant  charge  is  used  to  provide  the  latent  heat  of  vaporization  re- 
quired to  evaporate  the  liquified  gas  coolant.  It  is  capable  of  inflating  an  8.2  cu  m (290  cu  ft)  volume 
to  a pressure  of  .14  kg/sq  cm  (2.0  psi)  in  less  than  7 seconds,  over  a temperature  range  of  -40°C  to  +71 °C 
(-40°F  to  +160°F).  A detailed  analysis  of  inflation  devices  and  current  state-of-the-art  has  been  previously 
presented  in  Section  4.6.11.5;  however,  the  requirements  for  use  with  inflatable  restraints  and  inflatable 
escape  slides  differ  considerably. 

7.3  Mechanical  Escape  Devices 

7.3.1  Seat  Belt  Escape  Harness  and  Egress  Conveyor  System.  This  concept  envisions  an  integrated 
system  utilizing  the  restraint  system  and  seat  cover  to  allow  the  passenger  to  hook  onto  an  overhead  con- 
veyor system  which  would  automatically  carry  him  to  an  exit,  as  shown  in  Fig.  89.  There  is  some  precedence 
for  this  type  of  seat-mounted  escape  device  in  the  current  use  of  survival  kits  in  the  seat  pack  of  many 
aircrews.  This  concept  was  proposed  in  the  FAA  study  by  McDonnell  Douglas  [Roebuck,  1968  (15)].  The  seat 
back  cushion  would  be  designed  to  contain  an  anti-smoke  and  flame  hood  with  self-contained  air  supply, 
which  could  be  quickly  deployed.  The  sides  would  contain  a life  vest  which  could  be  pulled  out  and  wrapped 
around  the  body.  The  passenger  would  hook  his  seat  belt  to  the  back  cushion  system,  and  attach  the  entire 
system  to  an  overhead  hook  on  a cable.  The  seat  cushion  cover  and  back  cover  would  supply  a chair-like 
support,  and  the  conveyor  system  would  take  the  passenger  to  the  exit,  where  a deployment  strap  would  dis- 
connect the  occupant  either  manually  or  automatically. 


Fig.  8Q.  In  this  system  the  passenger  (1)  attaches  his  seat  belt  to  ih- 
teqrated  seat-back  straps,  (2)  hooks  into  an  overhead  hook,  and  (3)  is 
automatically  conveyed  to  an  exit  [Roebuck,  1968  (15)]. 


This  is  a complex  system  requiring  a series  of  action  by  the  user.  It  is  within  the  state-of-the- 
art,  however,  and  features  a systems  engineering  design  approach.  Estimated  additional  weight  was  1.36  kg 
(3  lb)  per  user;  however,  by  using  seat  cushion  cover  storage,  little  extra  volume  would  be  required.  A 
number  of  failure  possibilities  exist,  in  the  deployment  itself  as  well  as  in  strength  of  parts,  jamming 
of  equipment,  and  failure  of  the  power  source.  It  would  be  non-usable  in  accidents  involving  significant 
structural  intrusion  or  distortion.  If  everyone  had  to  be  hooked  up  before  it  operated  it  would  be  in- 
effective; yet  if  it  operated  as  a continual  conveyor  belt  system  from  the  moment  of  crash-impact,  some 
passengers  might  have  difficulty  in  reaching  a hook-up  or  might  be  struck  down  by  passengers  already  hooked 
up  and  being  conveyed  out.  Another  hazard  exists  in  that  the  passenger  might  be  conveyed  to  a non-usable 
exit  or  directly  into  a burning  area,  unless  there  were  direction  control.  Such  a device  could  prove 
hazardous  if  the  system  failed  while  passengers  were  still  attached;  they  would  be  near  the  ceiling  where 
the  heat,  smoke  and  fumes  would  be  greatest  and  would  provide  the  poorest  survival  environment.  Entangle- 
ment could  be  a further  hazard.  Also,  this  system  might  be  difficult  for  many  people  psychologically  to 
use  without  clear  briefing  and  practice.  It  is  not  considered  to  be  a reliable  systems  concept  in  this 
form,  but  could  be  further  modified  for  consideration  in  a simpler,  more  automatic  mode. 
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7.3.2  Folding  Escape  Slide.  Actually  a combination  walkway  and  mechanical  folding  slide,  this  con- 
cept would  consist  of  expandable  pivoting  structural  elements  which  could  be  stored  under  Type  I and  Type 
II  exits.  It  could  be  used  as  a firm  ramp  or  evacuation  slide.  As  shown  in  Fig.  90,  a specially  construc- 
ted, lightweight,  extendable  truss  structure  would  be  constructed  to  support  stairs  which  can  be  folded 
down  to  form  the  surface  of  a slide  or  ramp.  An  advantage  over  inflatable  devices  might  be  that  it  would 
not  puncture  or  tear.  An  analysis  of  mechanical  versus  inflatable  escape  devices  by  AIAA  (1968)  showed 
that  mechanical  devices  require  greater  storage  volume  and  heavier  structural  support.  It  was  determined 
that  a mechanical  stair  is  more  hazardous  due  to  the  quick  foot  movements  required  in  descent  which  can 
lead  to  stumbling  and  falling.  A fall  on  a stairway  could  seriously  impede  evacuation  flow. 


Fig.  90.  Mechanical  folding  escape  slide/stairway  [Roebuck,  1968  (15)]. 


7.3.3  Cargo-type  Emergency  Egress  Techniques.  This  concept  would  facilitate  the  evacuation  of  pas- 
sengers by  providing  large  openings  in  the  nose,  sides,  and  tail  of  passenger  aircraft.  This  might  be 
accomplished  by  using  techniques  presently  in  service  in  pressurized  cabin  cargo  aircraft  having  swing- 
nose,  clam  shell  or  swing-tail,  or  large  door  loading  capabilities.  It  was  estimated  that  this  system 
could  reduce  evacuation  time  and  passenger  flow  rate  by  90%  and  reduce  the  use  of  wrong  exits  by  10%  to  20%. 
No  data  are  available  to  validate  these  estimates.  Fig.  91  shows  a forward  fuselage  cargo-type  exit. 


Fig.  91.  Cargo-type  emergency  egress  technique  [Roebuck,  1968  (15)]. 


7.3.4  Conveyor  Belt  Concept.  A number  of  escape  system  concepts  have  been  proposed  in  the  literature 
to  assist  in  evacuation  of  passengers  from  their  seats  to  the  emergency  exits.  Most  of  these  have  not  been 
considered  here  because  of  obvious  technical  cost,  weight,  or  feasibility  problems,  although  most  appear 
to  be  within  the  state-of-the-art,  and  also  because  there  are  better  solutions.  Some  of  the  concepts  ex- 
cluded involve  flexible  curtains,  or  tunnels  deployed  in  the  aisles. 
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The  moving  walkway  passenger  conveyor  systems  proposed  to  the  FAA  would  consist  of  a forward  con- 
veyor belt  intended  to  improve  passenger  evacuation  time  and  reduce  the  problem  of  locating  exits  under 
smoke  conditions  [Roebuck,  1968  (15)].  An  individual  reaching  the  aisle  could  presumably  be  taken  to  an 
exit  if  he  were  incapacitated  or  injured.  Such  a system  is  within  the  state-of-the-art,  but  is  considered 
to  be  unpractical,  due  to  additional  weight  requirements,  fail-safe  aspects,  the  problem  of  "what  if  the 
conveyor  belt  is  going  in  the  wrong  direction"  to  get  to  usable  exits,  as  well  as  the  problem  of  potential 
injury  to  disabled  users  who  might  get  jammed  against  seats.  This  concept  is  illustrated  in  Fig.  92. 
However,  another  reason  why  such  a concept  would  have  limited  utility  is  shown  in  Fig.  93.  This  photograph 
was  taken  subsequent  to  the  FAA  crash  test  of  a Douglas  DC-7  aircraft  at  Deer  Valley,  Arizona,  and  shows 
the  buckling  of  the  fuselage  typical  of  many  air  transport  accidents.  In  such  instances  a conveyor  belt 
egress  technique  would  be  useless.  Fig.  23  in  Section  3. 1.5.1  shows  a recent  Boeing  727  crash  which  also 
illustrates  the  extreme  fuselage  distortion  which  is  often  found. 


Fiq.  g2.  Passenger  egress  from  seat  to  emergency  exit  via  conveyor  belt 
[Roebuck,  1968  (15)]. 


Fig.  93.  Post-crash  view  of  Douglas  DC-7  aircraft  crash-tested  by  the  FAA 
showing  typical  extreme  buckling  of  the  fuselage  (Photo  courtesy  FAA). 


7.3.5  Telescape  System.  The  telescape  system  consists  of  an  exit-mounted  pole  which  can  be  extended 
to  the  ground"  for  "fireman"  type  emergency  exit.  A major  advantage  is  that  it  provides  considerably  more 
"ground  reach"  flexibility  than  standard  inflatable  escape  slides;  that  is,  the  pole  can  be  deployed  and 
adjusted  to  the  terrain  condition  within  extreme  angles  and  used  with  wide  ranges  of  aircraft  attitudes. 
This  device  was  demonstrated  at  the  Aeronautical  Center,  FAA,  in  Oklahoma  City,  in  May,  1962,  and  was  sub- 
sequently tested  in  evacuation  tests  of  a Convair  YC-131  aircraft.  Development,  testing,  and  analysis  were 
under  the  direction  of  J.D.  Garner,  Chief,  Emergency  Escape  Section,  Protection  and  Survival  Laboratories 
[Garner  and  Blethrow,  1962  (1056)].  Two  group  test  evacuations  were  conducted  with  a mixed  passenger  group 
between  24  and  58  years  of  age,  as  well  as  a group  of  children  4 to  11  years  of  age,  and  individual  tests 
were  conducted  of  two  different  lengths  of  support  arms. 

In  this  system,  the  telescape  is  stored  in  a mounting  near  the  top  of  the  emergency  exit.  To  use  for 
an  evacuation  it  is  swung  out  into  position  (Fig.  94)  and  extended  to  a ground  point  (Fig.  g5). 
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Fiq.  Q4.  Telescape  swung  into  position  for  use 
at  exit  door. 


95.  Evacuation  using  fully  extended  telescape 
device  fOarner  and  Blethrow,  1962  (1056)]. 


A short  support  arm  (24.7  cm  [9-3/4  in])  and  a longer  arm  (73.1  cm  [28-13/16  in])  were  tested,  with 
45.7  cm  (18  in)  felt  optimum.  The  mounting  swings  through  134°  from  the  stored  position  against  the  exit 
bulkhead,  to  the  out  and  locked  position.  Extension  is  accomplished  by  a COp  bottle  providing  a pressure 
range  of  2.11  to  2.32  kg/sq  cm  (30  to  33  psi)  at  the  telescope  pressure  inlet.  Once  the  internally  ex- 
tended tube,  comprised  of  four  sections,  touches  the  ground,  a pressure  of  1.4  kg/sq  cm  (20  psi)  was  found 

sufficient  to  retain  pressure  within  the  tube  and  hold  it  in  place. 

Test  passengers  were  found  to  use  various  techniques  for  sliding  down  this  pole,  and  test  evacuations 
were  conducted  at  an  average  rate  of  3.61  seconds  per  passenger  on  the  first  test  and  3.31  seconds  per  pas- 
senger on  the  second  test.  A polished  chrome  finish  proved  satisfactory  for  surface  friction,  although 
less  friction  was  recommended  to  prevent  burns.  Rate  of  descent  was  not  injurious  under  the  conditions 
tested. 

This  concept  has  not  had  further  tests  conducted  under  darkness,  smokiness,  or  other  adverse  con- 
ditions. For  military  or  civil  adaption  it  would  only  be  useful  at  door  exits  and  could  not  be  used  in 

overwing  escape.  It  is  uncertain  how  it  could  be  relied  upon  to  function  after  fuselage  distortion. 

Where  air  evacuation  litter  patients  are  carried  it  would  probably  not  be  useful.  Insufficient  information 
is  available  to  compare  it  with  a rope  egress  as  an  escape  device  for  military  adaptation,  and  in  civil 
use  it  would  not  appear  feasible  for  many  segments  of  the  passenger  population  (infants,  small  children, 
elderly,  infirm). 

7.4  Heat  Shields 

7.4.1  Exit  Area  Ablative  Coating.  Severe  heating  from  exterior  fires  or  post-impact  fires  can  dis- 
tort exit  structure  and  prevent  opening  at  a later  time,  even  if  firemen  have  cleared  a flame-free  path  to 
the  exit.  New,  lightweight  ablative  coating  materials  applied  to  areas  around  and  over  the  exits  could 
form  an  insulative  layer  which  also  resists  flame  by  charring  and  off-gassing,  carrying  heat  away  from 
structure.  The  Apollo  heat  shield  is  a composite  material  based  on  epoxy  resin.  Although  relatively  soft, 
such  materials  could  be  covered  by  a thin,  glass-fiber  laminate  for  wear  resistance.  The  basic  ablative 
material  is  stabilized  by  a glass-fiber  laminate  honeycomb  bonded  to  the  surface.  For  a reasonable  evacua- 
tion period  (2  to  5 minutes),  a layer  only  .64  to  .95  cm  (1/4  to  3/8  in)  thick  could  provide  protection 
against  fires  of  JP-4  or  other  fuels  which  burn  cooler  than  spacecraft  re-entry  temperatures  of  2200°  to 
2760°C  (4000°to  5000°F).  A typical  exit  area  coating  is  illustrated  in  Fig.  96. 

This  concept  would  primarily  protect  against  flame  and  heat  damage  but  is  included  in  this  section 
since  it  could  improve  exit  area  integrity  and  identification  and  thus  might  improve  egress  success. 
Emergency  egress  devices  such  as  escape  slides,  tubes,  or  raft/slide  combinations  could  have  a flexible 
ablative  coating  to  protect  them  for  a short  time  duration  against  flame  damage.  NASA  is  currently  ex- 
ploring the  feasibility  of  effective  flexible  coatings. 

For  exterior  usage  in  exit  areas  there  may  be  a drag  penalty  which  would  overweigh  its  practical 
employment.  Maintenance  and  repair  require  special  equipment  and  supplies,  and  other  problems  include  the 
increase  in  weight  of  doors  and  hatches  on  which  the  coatings  are  used,  making  them  more  difficult  to 
handle.  Combustion  products  could  also  be  highly  toxic  and  even  if  used  only  externally,  the  fumes  could 
be  blown  inside.  Advantages,  however,  are  that  the  coating  provides  a longer  time  before  structures  to 
which  it  has  been  applied  heat  up,  thereby  offering  a potential  longer  usage  of  emergency  exits  under  heat 
and  flame  conditions,  which  presumably  could  reduce  incidence  of  jamming.  If  an  exit  is  heated  sufficient- 
ly to  distort,  it  may  no  longer  be  usable  for  egress,  even  if  it  could  be  opened. 

Since  any  weight  penalty  is  an  important  consideration  in  air  carrier  operation,  it  was  estimated 
that  an  air  transport  having  a gross  weight  of  181,436  kg  (400,000  lb)  could  be  protected  by  heat  shielding 
by  increasing  weight  1.46  kg  per  sq  m (0.3  lb  per  sq  ft)  of  protected  surface  area.  This  would  increase 
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structural  weight  fraction  from  30.0  to  30.4  percent,  and  total  gross  weight  by  771  kg  (1,700  lb).  This 
system  was  proposed  by  NASA  for  retrofit  of  current  air  transport  aircraft,  but  has  subsequently  been  of 
less  interest. 


Ablative  Coated 
Area 


Ablative  Epoxy 
Resin — 7 


Fiber  - Resin  Laminate 
Coating  for  Wear  Resistance 

■Honeycomb  Glass  Fiber -Resin  Laminate 
to  Stabilize  Ablative  Material 


Fiq . 96.  Emergency  exit  area  ablative  coating  [Roebuck,  1968  (15)]. 


7.4.2  Cabin  Fire-Protecti ve  Shielding.  The  primary  work  in  development  of  heat  shielding,  that  is, 
surrounding  the  passenger  compartment  by  a fi re-retardant  shell  able  to  protect  the  occupants  long  enough 
for  the  fire  to  burn  out  or  to  be  extinguished,  has  been  conducted  at  NASA  Ames  Research  Center  [Neel  et 
al . , 1971  (1057)].  In  tests  conducted  13  August,  1970  at  Otis  Air  Froce  Base,  Mass.,  on  sections  of  a 
Douglas  C-47,  the  major  objectives  considered  to  influence  survival  in  a crash  fire  were  to  minimize  heat 
penetration  and  prevent  intrusion  of  smoke  and  toxic  gases.  The  fire-protection  system  consisted  of  frames 
painted  with  intumescent  paint  .127  cm  (0.05  in)  thick  (to  expand  and  fill  any  voids  caused  by  shrinkage 
of  the  foam  as  it  charred),  over  which  a layer  of  loosely  woven  fiberglass  matting  was  bonded  to  the  skin 
to  reinforce  the  charred  zone  of  foam.  Sprayed  over  the  matting,  the  polyisocyanurate  foam  (density  of 
approximately  64  kg  per  cu  m [4  lb  per  cu  ft])  was  built  up  to  the  6.35  cm  (2-1/2  in)  depth  of  the  frames 
and  5. 1-7. 6 cm  (2-3  in)  over  the  floor  structure,  A liner  of  fiberglass-epoxy  laminate,  similar  to  present 
air  carrier  decorative  interior  paneling,  of  .79  mm  (1/32  in)  thickness,  was  cemented  to  the  foam  and  then 
riveted  to  the  frames.  The  floor  foam  was  also  covered  with  laminate,  and  all  joints  were  sealed  to  exclude 
smoke  and  gases. 

Results  of  this  test  were  impressive  as  to  the  protection  heat  shielding  could  offer.  In  the  unpro- 
tected standard  Douglas  C-47  cabin  section  the  air  temperature  rose  to  315.5°C  (600°F)  in  less  than  2 minutes 
after  the  initiation  of  the  fire,  and  the  section  was  destroyed  within  2 minutes.  In  contrast,  the  heat- 
shield  protected  section  withstood  6 minutes  of  fire  with  no  increase  in  temperature,  rising  to  148. 8°C 
(300°F)  as  heat  finally  penetrated,  and  the  fire  burned  out  at  12  minutes.  A gas  sample  taken  5 minutes 
after  ignition  showed  no  toxic  gas  penetration.  Fig.  g7  illustrates  the  cabin-air  temperature  during  these 
tests  relative  to  human  tolerance,  while  Fig.  98  shows  the  installation  of  the  fire-protective  shielding. 


Fiq.  97.  Cabin  air  temperature  in  NASA  C-47  cabin  shield  fire  test 
[Neel  et  al.,  1971  (1057)]. 
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Fig.  98.  Installation  of  fire-protective  materials  in  NASA  aircraft  cabin  test 
[Neel  et  al . , 1971  (1057)]. 


7.5  High  Energy  Emergency  Egress  Systems 

A major  problem  in  emergency  egress  has  been  emphasized  by  a number  of  studies  of  both  military  and 
civil  air  transport  accidents  relating  to  the  inadequacy  of  non-availability  of  emergency  exits  subsequent 
to  a crash.  An  analysis  of  commercial  air  carrier  accidents  by  the  Flight  Safety  Foundation  for  the  period 
1957-1967  resulted  in  the  estimate  that  35  to  50  percent  of  the  794  non-survivors  of  survivable  accidents 
could  have  been  saved  if  adequate  exits  had  been  available.  In  26  of  the  34  survivable  accidents  occurring 
during  that  period,  it  was  reported  that  of  the  215  exits  available,  only  53  were  used  (24.7  percent). 
During  emergency  evacuation  of  17  aircraft,  152  exits  were  available  and  only  44  (28.9  percent)  were  used 
[Caldara,  1967  (1058);  1968  (1059)].  In  other  cases  the  exits  were  blocked,  or  panicked  passengers  in 
smoke  conditions  could  not  identify  exits.  Examination  of  military  air  transport  accidents  supports  the 
need  for  larger,  more  readily  available  exits  which  will  not  jam.  This  appears  to  be  a particular  need 
in  aircraft  such  as  the  Boeing  C-135,  where  the  number  of  passengers  often  exceeds  the  critical  evacuation 
flow  capability  of  current  exits. 

7.5.1  ELSIE . A solution  to  this  problem  appears  to  be  utilization  of  the  ELSIE  (Emergency  Life 
Saving  Instant  Exits)  system  which  uses  "jet  cord"  flexible  linear  shaped  charges  to  blow  emergency  exits 
at  predetermined  strategic  locations  in  the  fuselage  skin,  or  where  available  exits  have  become  jammed. 

Fig.  99  illustrates  how  this  system  might  be  applied  to  the  Lockheed  C-141  aircraft.  ELSIE  has  been  de- 
veloped under  contract  to  the  Life  Support  System  Program  Office  ASD/AFSC,  Wri ght-Patterson  AFB,  by  Explo- 
sive Technology,  Fairfield,  California,  having  evolved  from  their  STEN  (Stored  Energy)  concept  developed 
in  1967  [Nicholson  and  Burkdoll,  1971  (1072);  Burkdoll  and  Nicholson,  1971  (1066);  Bogland,  1967  (1064); 
Explosive  Technology,  1968  (1068);  1970  (1069)].  A similar  concept  has  been  reported  by  Space  Ordnance 
Systems,  Inc.  of  El  Segundo,  California,  for  providing  "supplemental  emergency  exit  doors"  [Brown,  1967 
(1065)],  who  had  designed  the  crew  escape  module  severance  system  for  the  General  Dynamics  F-lll  aircraft 
and  others. 

This  system  consists  of  a variety  of  shapes  and  lengths  of  linear  shaped  charges  (LSC)  which  can  be 
routed  around  any  existing  exit  (to  ensure  that  it  is  instantly  severed),  or  create  a larger  exit  area  for 
emergency  use  at  any  desired  point.  The  five  basic  components  are:  a safe/arm  mechanism,  shielded  mild 

detonating  core  lines,  a flexible  shaped  cutting  charge,  an  interior  initiation  handle,  and/or  exterior 
initiation  handle.  ELSIE  system  characteristics  are  reported  to  be  that  it  opens  emergency  exits  in  less 
than  0.001  second  (with  smooth  edges),  cannot  jam,  always  jettisons  outward,  cannot  be  inadvertently  opera- 
ted but  is  instantly  operable  from  the  interior  or  exterior  following  a crash,  and  requires  no  special 
structures.  To  initiate,  the  safe/arm  electromechanical  device  is  electrically  armed  from  the  flight  deck, 
then  manually  initiated  at  an  ELSIE  system  station  by  pulling  either  the  interior  or  exterior  handle. 
Detailed  technical  evolution  and  specifications  are  reported  in  Nicholson  and  Burkdoll  [1971  (1072)]  and 
in  Burkdoll  et  al . [1971  (1067)]. 

ELSIE  has  been  subjected  to  extensive  ground  tests  and  was  tested  in  a Lockheed  130A  gunship  opera- 
tionally [Burkdoll  et  al . , 1971  (1067)].  Extensive  flight  tests  were  conducted  in  an  operational  Convair 
C-131B  aircraft  [Anderson  and  Burkdoll,  1974  (1061)].  In  these  tests  the  four  over-the-wing  emergency 
egress  doors  were  modified  to  accommodate  the  ELSIE  system.  This  system  was  armed  during  takeoffs  and 
landings  and  disarmed  during  normal  flight,  using  the  normal  aircraft  electrical  system.  After  250  hours 
of  flight  tests,  the  ELSIE-equi pped  doors  were  removed  from  the  aircraft  and  successfully  subjected  to  a 
series  of  functional  tests  designed  to  demonstrate  the  capability  of  this  system  to  withstand  aircraft 
operational  environments  over  an  extended  period  of  time  without  decrement. 

An  important  proposed  use  of  the  ELSIE  system  would  be  to  incorporate  emergency  equipment  in  the 
system  so  that  activation  would  also  automatically  deploy  slides,  life  rafts,  or  slide/raft  combinations, 
or  other  devices.  This  would  not  only  make  available  instantaneous  (and  larger)  emergency  exits,  but  also 
would  save  considerable  time  which  is  presently  required  to  effectively  deploy  these  devices. 
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Fig.  99.  ELSIE  system  for  instantaneous  egress  as  might  be  conceived  for 
Lockheed  C-141  aircraft. 


Fig.  100.  Experimental  high  energy  emergency  exit  configuration  showing 
instantaneous  deployment  of  slide/raft  for  subsequent  emergency  escape 
fCaldara,  ig70  (4)]. 


Ground  tests  [Nicholson  and  Burkdoll,  1971  (1072);  Anderson  and  Burkdoll,  1974  (1061)]  consisted  of 
9 separate  tests  for  vibration,  operating  temperature,  12.2  m (40  ft)  drop,  40  G shock,  structural  deforma- 
tion, water  immersion,  cook-off,  fuel  ignition,  and  inadvertent  detonation  by  fire. 

Environment  tests  showed  that  excessive  vibration,  operating  temperatures  of  +93.3°C  to  -53.8°C 
(+200°F  to  -65°F)  and  12.2  m (40  ft)  drop  tests  did  not  affect  operation  of  this  system.  Shock  loads  of 
20  and  40  G for  0.10  second  duration  along  three  orthogonal  axes,  and  bending  test  panels  to  150°  deforma- 
tion were  found  not  to  influence  performance.  Thermal  environmental  testing  included  exposure  to  218. 3°C 
(425°F)  without  "cook-off"  detonation.  A fuel-fed  fire  showed  that  the  system  would  not  detonate  "even 
though  the  skin  on  one  test  panel  was  burned  completely  through"  [Anderson  and  Burkdoll,  1974  (1061)].  In 
addition,  a series  of  10  fuel  ignition  tests  in  which  JP-4  and  115/145  grade  aviation  fuel  were  sprayed  on 
the  panels  failed  to  Inadvertently  ignite  the  system. 

The  ELSIE  system  is  designed  for  instantaneous  operation  of  emergency  exits,  and  it  was  found  that 
the  ground  test  panel  was  ejected  at  a velocity  of  1.83  to  2.44  m/sec,  or  8 km/h  (6  to  8 ft/sec,  or  5 mph), 
and  required  0.027  sec  time  from  remote  initiation.  Design  goal  was  0.999  reliability  at  0.90  confidence 
level,  a total  life  of  7 years,  including  an  installed  life  of  not  less  than  5 years.  Maintenance  of 
this  system  is  reported  to  be  "essentially  zero"  [Anderson  and  Burkdoll,  1974  (1061)],  requiring  no  know- 
ledge of  explosive  ordnance. 

At  the  termination  of  the  Convair  C-131B-820  flight  tests  conducted  during  1972  and  early  1973,  and 
after  experience  with  a variation  of  the  ELSIE  system  installed  in  a Lockheed  AC-130E  aircraft,  results 
appeared  to  warrant  installation  in  operational  USAF  air  transport  aircraft  due  to  its  ease  of  retrofit 
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(minimum  airframe  modification  is  necessary),  and  it  is  planned  that  USAF  Lockheed  C-141's  will  be  gradually 
modified  as  they  require  IRAN. 

Features  of  the  ELSIE  system  include  the  following: 

(1)  always  outward  opening; 

(2)  operable  by  a passenger  or  crew  member  in  less  than  0.027  sec  when  armed; 

(3)  maintenance-free  and  highly  reliable; 

(4)  immune  to  the  environments  of  a survivable  crash  (i.e.,  fire,  jamming,  dynamic  loads); 

(5)  can  be  integrated  into  the  aircraft  without  affecting  the  function  of  the  aircrew  or  occupying 
usable  space; 

(6)  does  not  affect  the  aerodynamic  characteristics  of  the  aircraft; 

(7)  can  be  controlled  by  the  commander  from  the  flight  deck,  thus  making  it  operable  only  when 
the  probability  of  a crash  is  greatest; 

(8)  requires  only  momentary  power  to  arm  or  safe; 

(9)  can  be  operated  from  inside  or  outside  the  aircraft. 

For  further  details  of  ground  and  flight  tests  the  best  references  are  Nicholson  and  Burkdoll  [1971 
(1072)]  or  Anderson  and  Burkdoll  [1974  (1061)],  and  for  most  recent  developmental  progress,  Heaton  and 
Beers  [1975  (1071)]  or  Burkdoll  et  al . [1975  (1066)]. 

Despite  the  demonstrated  success  of  the  ELSIE  system  as  developed  and  tested  for  military  air  transport 
aircraft,  several  aspects  may  influence  acceptance  of  this  system  for  civil  air  carrier  usage  [Pollard,  1971 
(1078)].  Although  the  military  has  extensive  experience  with  explosive  escape  technology  in  many  of  its  air- 
craft, and  shielded  mild  detonating  cord  lines  for  the  flexible  linear  shaped  charges  similar  to  those  used 
in  ELSIE  are  operational  in  General  Dynamics  F-lll,  Grumman  F-14  and  Lockheed  S-3A  aircraft,  such  explosive 
technology  systems  have  not  been  previously  utilized  in  civil  operations.  Reliability,  inspection  methods, 
testing,  potential  for  human  error,  and  litigation  are  all  considerations  upon  which  the  air  carrier  opera- 
tor may  need  further  assurances.  One  problem  in  civil  use  is  the  means  of  initiation  of  the  system.  Mili- 
tary usage  has  shown  that  it  can  be  initiated  electrically  or  mechanically,  and  operated  from  the  flight 
deck,  by  a passenqer,  or  from  the  outside.  Again,  despite  the  options  available,  civil  air  carrier  opera- 
tors must  be  satisfied  that  the  mechanics  of  the  system  are  fool-proof.  Although  the  purpose  of  this  study 
is  to  evaluate  the  state-of-the-art  of  the  concepts  and  technology,  such  concerns,  while  not  directly  re- 
lated to  the  technical  capabilities,  may  eventually  play  an  important  role  in  the  decision  process  affecting 
application  of  any  concept  utilizing  an  "explosive"  system. 

7.5.2  Liquid  Explosive  Emergency  Exit  System.  An  evaluation  of  the  liquid  explosive  emergency  exit 
concept  for  application  to  civil  transport  aircraft  has  been  conducted  by  the  National  Aviation  Facilities 
Experimental  Center,  Atlantic  City,  New  Jersey  [Jaglowski,  1970  (1085);  1971  (1086)].  The  evaluation  in- 
dicates that  liuqid  components  of  nitromethane  and  a sensitizer  can  effectively  create  an  emergency  exit 
in  a typical  jet  transport  fuselage.  However,  it  was  found  that  nitromethane  will  freeze  at  -34.4°C 
(-30°F)  and  prevent  subsequent  detonation  of  the  liquid-filled  linear  shaped  explosive  charge.  Another 
limitation  of  this  system  was  that  "the  liquid-filled  linear  shaped  charge  will  operate  satisfactorily 
following  simulated  crash  impact  conditions  where  no  severe  fuselage  structural  damage  or  deformation 
of  the  linear  tubinq  occurs"  [Jaglowski,  1971  (1086)]. 

Thus  the  solid  explosive  charge  of  the  ELSIE  system,  which  can  operate  at  temperatures  below  -53.8°C 
(-65°F)  and  is  not  affected  by  fuselage  deformation,  appears  to  be  considerably  more  reliable  than  the  liquid 
charge  approach  as  evaluated  by  the  FAA. 

7.6  Emergency  Inflight  Egress 

Little  attention  has  been  given  to  the  problem  of  emergency  inflight  evacuation  from  air  transport 
aircraft  other  than  standard  bail-out  techniques.  Yet,  test  flight  crews  have  often  had  emergency  escape 
devices  in  prototype  air  transports  subjected  to  initial  test  flights.  Such  aircraft  as  the  Fokker  F-27, 
the  Concorde,  the  Boeing  747,  727,  and  707,  and  the  McDonnell  Douglas  DC-8,  for  example,  had  escape  chutes 
installed  on  the  fliqht  deck  for  inflight  emergency  escape  of  flight  test  crews.  The  Aeritalia  G222  twin 
turbo-proo  military  transport  also  has  utilized  escape  chutes  constructed  in  the  bottom  of  the  flight  deck 
in  the  prototype  aircraft.  The  Concorde  prototype  utilized  floor  emergency  escape  chutes  in  three  locations; 
one  at  the  riqht  rear  of  the  flight  deck,  one  in  the  main  cabin,  and  one  in  the  rear  of  the  aircraft.  The 
military  Boeing  C-135  transport  has  an  entry  chute  spoiler  at  the  primary  inflight  flight  deck  exit,  to 
protect  the  crewmen  in  bail-out  from  striking  structure  due  to  windblast.  When  all  passengers  and  crew  are 
equioped  with  parachutes,  bail-out  can  be  accomplished  successfully,  provided  airspeeds  are  not  too  high 
and  there  is  sufficient  altitude  and  time.  However,  at  high-speed,  high-altitude  conditions,  even  well- 
equipped  flight  crew  may  have  difficulty.  Uninitiated  passengers,  female,  child,  or  infant  passengers, 
and  litter-cases  cannot  be  expected  to  bail  out  successfully,  particularly  under  adverse  conditions. 

Close  examination  of  current  accident  experience  shows  that  inflight  structural  failure  as  a result 
of  extreme  turbulence,  mid-air  collision,  or  other  emergency  such  as  fire,  decompression,  or  explosion 
(Appendices  A-D)  does  occur  all  too  frequently.  In  cases  where  catastrophic  inflight  structural  failure 
occurs,  there  presently  is  no  way  to  save  the  occupants. 

It  is  interesting  to  note  that  the  concept  of  inflight  recovery  of  aircraft  and  passengers  is  not 
new.  In  1928  the  War  Department  (Air  Corps)  developed  an  experimental  parachute  25.6  m (84  ft)  in  diameter 
"and  sufficient  to  support  the  weight  of  an  airplane  and  its  passengers,  bearing  them  safely  to  earth" 
[Winters,  1928  (1106)].  Design  of  this  early  device  was  attributed  to  Major  E.L.  Hoffman,  who  was  respon- 
sible for  development  of  the  U.S.  Army  Standard  7.3  m (24  ft)  parachute.  Some  appreciation  of  the  techni- 
cal difficulties  and  problems  apparently  unsolved  in  this  design  of  nearly  50  years  ago  may  be  observed 
in  the  following  description  of  the  test  evaluation  with  a 725.7  kg  (1,600  lb)  weight:  "The  preliminary 
tests  with  this  high  parasol,  resembling  such  when  its  mammoth  billows  of  silk  unfold,  were  beset  with 
difficulties.  This  Goliath  of  all  parachutes,  with  its  great  lift  and  enormous  strength,  demonstrated  a 
disinclination  to  deflate  upon  landing,  and  it  was  equally  unresponsive  to  efforts  to  halt  its  racing 
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Droclivities  across  an  open  field.  Singularly  amusing  must  have  been  the  use  of  an  automobile  for  chasing 
the  errant  oarachute.  The  aviator,  upon  overtaking  it,  alighted  from  the  automobile  and  grabbed  at  the 
shroud  lines  of  the  parachute.  His  strength,  pitted  against  such  a Samson-like  structure,  was  utterly 
futile  and,  unfortunately,  he  became  enmeshed  in  the  billows  of  silk,"  finally  just  avoiding  being  dis- 
patched by  the  1,600  lb  weight  [Winters,  1928  (110  )]. 

In  recent  years  much  attention  has  been  given  to  the  problem  of  safe  recovery  of  passengers  or  crew 
from  disabled  helicopters,  with  at  least  nine  primary  concepts  proposed,  and  some  developed  and  tested. 
Detailed  discussion  of  these  technigues  has  been  presented  in  two  recent  AGARD  reports:  Escape  Problems 
and  Manoeuvres  in  Combat  Aircraft  [1974  (1091)]  and  Escape  Measures  for  Combat  Helicopter  Crews  [T973 
(1087)].  The  techniques  consisT  of:  (1)  manual  bail -out  escape,  (2)  upward  ejection  seat  escape  concept 

(first  explosively  separating  the  rotors),  (3)  downward  ejection  seat  escape  concept,  (4)  sideward  ejection 
seat  escape  concept,  (5)  L-shaned  ejection  seat  escape  concept,  (6)  upward  extraction  escape  concept,  (7) 
sideward  extraction  escaoe  concept,  (8)  total  aircraft  recovery  concept,  and  (9)  capsule  recovery  concept. 
The  Working  Group  sponsored  by  the  Flight  Mechanics  Panel  of  AGARD  concluded  (l)  that  manual  bail-out  or 
sideward  extraction  systems  were  the  only  systems  which  could  be  retrofitted  in  an  absolute  minimum  of 
development  time  and  which  did  not  require  major  chanqes  to  the  helicopter  (although  neither  are  very  effec- 
tive at  low  altitude);  (2)  that  upward  extraction  (or  ejection)  or  sideward  ejection  with  L-shaped  trajec- 
tory are  the  best  aooroaches  for  helicopters  that  have  been  conceived  but  not  yet  designed  in  detail  and 
fabricated  (although  a major  disadvantage  of  upward  extraction  or  ejection  is  the  need  for  disposing  of 
the  rotor);  and  (3)  that  the  best  candidate  for  helicopters  that  have  not  yet  been  conceived  ("far-term") 
would  be  an  escane  caosule  [1973  (1087)].  AGARD  recoimended  that  all  future  helicopters  incorporate  1n- 
fliaht  escane  systems  from  conception. 

Two  of  the  systems  which  have  been  considered  for  helicopters  may  have  application  to  commercial  air 
carriers,  those  of  caosule  escape  and  total  aircraft  escape.  Thus  the  evaluations  given  for  use  of  these 
concepts  in  helicopters  should  be  considered.  In  the  total  recovery  concept,  a cluster  of  parachutes  would 
be  deployed  to  slowly  lower  the  helicopter  to  the  ground  (Fig.  101).  In  addition,  shock  absorption  tech- 
nloues  such  as  inflatable  bags  and/or  retrorockets  might  be  required  to  reduce  final  impact  loads.  Problems 
include  mounting  of  parachute  containers,  effect  on  helicopter  flight  dynamics  and  stability,  long  deploy- 
ment times  (precluding  survival  below  91.4  m T300  ft],  weight  (6-10%  of  the  helicopter's  gross  weight,  which 
might  be  as  great  as  50%  of  other  available  payload),  and  the  technical  complexities  Involved.  Total  air- 
craft recovery  was  not  considered  a promising  concept  for  helicopter  inflight  escape  by  the  AGARD  Working 
Grouo,  although  the  big  advantages  offered  are  that  of  effecting  recovery  of  all  of  the  occupants  through 
a single  system,  and  the  possibility  of  repair  and  reuse  of  the  vehicle. 


Fig.  101.  Total  aircraft  recovery  concept  for  helicopters 
[AGARD,  1973  (1087)]. 


For  multi-place  helicopters,  especially  those  carrying  passengers,  the  modular  recovery  concept  In 
which  the  entire  occupied  section  of  the  cabin  Is  recovered  "appears  to  be  the  only  practical  possibility 
for  escape"  (1087).  Although  this  concept  Is  essentially  the  same  as  for  total  aircraft  recovery,  the 
module  welqht  is  minimized.  The  occupied  compartment  would  be  separated  by  explosively  severing  airframe 
appendages,  propulsion  systems,  tail  cones,  etc.  A cluster  of  bal 1 1 s ti call y deployed  and  spread  parachutes 
would  be  used  for  recovery,  and  would  have  to  lower  the  module  at  a survlvable  descent  rate  of  less  than  9.1 
m/sec  (30ft/sec)  [AGARD,  1973  (1087)].  Small  explosive  cutting  charges  can  sever  the  tail  boom  assembly 
and  rotor  bladesjwithln  0.1  second  of  the  severance  of  these  structural  components,  a "drogue  gun"  fires 
a nylon  line  attached  to  a parachute  deployment  package  directly  overhead,  deploying  the  main  descent  re- 
covery parachute  which  then  lowers  the  fuselage  module.  The  parachute  Is  reportedly  deployed  in  less  than 
0.5  second  from  the  activating  signal,  and  is  designed  to  bring  down  the  helicopter  at  a rate  of  about  10 
m/sec  (33  ft/sec)  or  less.  The  components  have  been  tested  at  the  U.S.  Navy’s  Weapon  Laboratory,  Dahlgren, 
Virginia,  and  tested  at  El  Centro  Naval  Air  Facility,  and  may  be  considered  within  the  state-of-the-art 
[Arnold  and  Pollard,  1968  (1088);  Teledyne  McCormick  Selph  (1104)].  Studies  have  also  been  performed  at 
the  U.S.  Naval  Air  Development  Center  which  have  demonstrated  the  feasibility  of  a helicopter  capsule  es- 
cape system  by  Vertol  Division  of  the  Boeing  Company  [Millington  and  Thompson,  1966  (1101 );  Boeing  Company, 
1968  (1102);  1969  (1105)]. 

Several  concepts,  based  upon  current  state-of-the-art  technology  have  been  advanced  to  provide  emer- 
gency egress  Inflight.  Snyder  and  Stapp  [1969  (1103)]  outlined  physiological  tolerance  factors  necessary 
for  survival,  and  evaluated  current  inflight  egress  techniques,  Including  ejection,  encapsulated  seats, 
and  separable  compartment  systems.  Escape  from  helicopters  has  had  considerable  attention,  and  several 
concepts  for  rotorcraft  or  V/ST0L  emergency  egress  might  be  applied  to  air  carrier  aircraft  [AGARD,  1973 
(1087) ; Arnold  and  Pollard,  1967  (1088);  Law,  1974  (1092);  Ogden  and  Davis,  1974  (1093)].  Use  of  ejection 
seats  In  air  transports  does  not  appear  feasible,  since  passengers  would  not  normally  be  equipped  to  face 
temperatures  to  -55°C  (-67°F),  deceleration  wlndblast  to  20  G,  and  oxygen  deficiency  In  a 9144  m (30,000  ft) 
Initial  ejection  environment.  The  structural  modification  necessary  to  eject  150  or  so  separate  passengers 
would  present  unreasonable  structural  weight  and  cost  penalties,  and  this  technique  was  not  felt  feasible. 
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Capsule  proposals  have  also  been  advanced  [Dobbek,  n.d.  (1090);  Wilkes,  1952  (1097)].  The  following  sec- 
tions briefly  survey  several  of  the  concepts  proposed  for  inflight  emergency  egress  of  air  transport  occu- 
pants. 


SMALL 


TAIL  SEVERANCE 


LARGE 


WITH  PARTIALLY 
DEPLOYED  PARACHUTES 


STABILIZED  MODULE  WITH 
PARACHUTES  FULLY  DEPLOYED 
AND  CRASH  ATTENUATOR 
BAG  INFLATED 


STABILIZED  MODULE 
WITH  PARACHUTES 
FULLY  DEPLOYED  AND 
CRASH  ATTENUATOR 
BAG  INFLATED 


Fig.  102.  Capsule  recovery  concept  for  helicopters  [AGARD,  1973  (1087)]. 


7.6.1  Tail  Evacuation.  To  avoid  the  problems  of  multiple  fuselage  exits,  one  technique  would  be 
to  mount  speci ally  mod i f i ed  seats  on  rails  in  the  floor  which  would  be  oriented  from  front  to  rear  of  the 
cabin.  In  case  of  inflight  evacuation  emergency,  the  seats  would  be  sequentially  fired  toward  the  tail, 
which  would  be  separated  to  allow  sufficient  exit  space,  much  as  cargo  is  sometimes  dropped  from  transports 
in  combat.  The  seated  occupant  could  then  be  automatically  lowered  to  the  ground  by  parachute.  This 
method  also  presents  timing  problems  in  evacuation,  in  balancing  the  necessity  to  evacuate  a large  number 
of  persons  rapidly  with  their  ability  to  tolerate  the  evacuation,  and  might  not  be  feasible  in  aircraft 
having  engines  located  at  the  tail.  An  alternative  concept  was  recommended  to  Tactical  Air  Command  in  1963 
by  Stapp  for  deployment  of  airborne  troops  in  low-level  operations  (below  61  m [200  ft]  msl),  using  static 
lines  on  an  accordion  pleated,  rip-stitched  overhead  webbing  on  guides.  The  webbing  would  be  towed  out 

by  a large  drogue  chute  catapulted  at  45°  upward  from  the  open  rear  of  the  fuselage,  ripping  the  stitches 
as  it  evacuated  the  attached  cargo  and  paratroopers  6.1  m (20  ft)  apart.  Their  chutes  would  be  deployed 
by  a hook  as  they  emerqed  through  the  rear  opening.  For  ease  in  assembly  at  night,  they  would  remain 
attached  to  the  webbing. 

7.6.2  Paracone  Concept.  Modification  of  the  current  operational  technique  of  aerial  delivery  of 
carqo  has  been  proposed  by  Kendall  [1970  (1098)]  utilizing  the  paracone  technique.  In  this  system  the  air- 
craft would  be  constructed  as  a shell  with  each  floor  made  with  rollers  and  hardware  required  in  present 
USAF  airborne  cargo  drops.  All  passenger  seats  would  be  mounted  on  pallets  up  to  7.3  m (24  ft)  long  (9' 

x 24'  x 436L  pallet)  holding  24  passengers.  The  paracone  device  and  its  inflation  system  would  be  packaged 
under  the  floor.  Deployment  would  be  identical  to  the  current  military  airborne  drop  except  that  rather 
than  open  doors,  the  tail  section  would  be  blown  off.  Pallets  would  be  propelled  out  the  rear  on  rollers, 
the  first  pallet  deploying  an  extraction  chute  to  provide  for  deployment  of  the  succeeding  pallet.  This 
concept  would  have  the  extracting  chute  stabilize  the  pallet  while  the  paracone  deployed  in  approximately 
4-5  seconds,  as  is  shown  in  Figs.  103  and  104.  The  paracone  escape  and  recovery  system  would  be  self- 
sufficient,  having  rafts  and  survival  equipment  self-contained.  Kendall  has  proposed  the  use  of  inflatable 
air  bags  for  the  pallet  passengers  to  protect  them  from  initial  airblast  during  deployment. 

The  paracone  consists  of  a cone-shaped  expandable  and  pneumatically  inflatable  structure  that  utilizes 
the  advantages  of  the  parachute.  It  is  constructed  of  expandable  material  which  is  lightweight  and  can  be 
packaged  readily  and  is  reportedly  more  effective  than  the  parachute  as  an  aerodynamic  decelerator.  It 
is  cone-shaped  with  an  open  end  and  the  payload,  rather  than  being  suspended  as  with  a parachute,  is  lo- 
cated inside  the  open  end  of  the  cone  with  the  inflated  structure  surrounding  and  supporting  it.  Between 
the  impact  attenuation  floor  and  the  payload  is  an  inflation  gas  distribution  plenum  chamber  which  doubles 
as  the  flotation  chamber  in  case  of  water  landing.  The  paracone  has  been  extensively  tested  with  systems 
analysis  and  subsonic  development  by  McDonnell  Douglas.  Drag  co-efficients  of  from  0.6  to  1.2  were  re- 
ported, and  impact  velocities  of  8.5  to  15.2  m/sec  (28  to  50  ft/sec)  (27  to  30  G)  for  a time  duration  of 
0.1  second  were  measured.  Kendall's  analysis  [1970  (1098)]  indicated  that  the  paracone  can  be  successfully 
dropped  at  very  low  altitude  (61  to  106  m [200  to  350  ft])  and  high  velocity  (482  to  965  km/h  [300  to  600 
mphj).  Application  studies  have  been  conducted  for  space  booster  recovery,  emergency  astronaut  escape 
and  recovery  from  orbit,  vehicle  recovery  from  orbit  at  velocities  over  10,668  m/sec  (35,000  ft/sec),  ve- 
hicle landings  on  planets,  zero  velocity-zero  altitude,  supersonic  and  hypersonic  ejection,  airborne  cargo 
drons,  paratroop,  and  emergency  bail-out.  This  concept  has  been  considered  for  application  to  the  McDonnell 
Douglas  DC-10  transport  aircraft. 
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Fig.  103.  Paracone  emergency  inflight  egress  concept  [Kendall,  1970  (1098)]. 


Fiq.  104.  Pallet  passenqer  packaging  at  initiation  of  inflight  emergency  escape 
by  paracone  concept  [Kendall,  1970  (1098)]. 
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7.6.3  Rap i d jet . To  provide  fast  inflight  egress  for  passengers  or  crew  without  the  necessity  of 
donning  flight  clothes  or  parachutes,  and  when  "the  presence  of  fire,  smoke,  poor  visibility,  aircraft 
maneuvers,  decompression,  injuries,  hypoxia,  panic,  or  confusion  impairs  the  ability"  of  the  occupants  to 
put  on  their  equipment,  the  rapidjet  concept  was  proposed  [McIntyre,  1970  (1099)].  The  rapidjet  installa- 
tion would  consist  of  an  escape  slide  with  power  operated  inner  and  outer  doors,  a series  of  individual 
crew  escape  modules,  and  the  power  drive  unit  required  for  module  advance  and  release.  The  escape  module 
for  each  passenger  consists  of  an  encapsulation  bag  of  "cocoon"  and  a parachute  pack.  The  open  end  of  the 
cocoon  is  stretched  across  the  escape  slide  entrance  so  that  the  crewman  enters  the  cocoon  as  he  jumps  into 
the  slide.  Upon  reaching  the  bottom  of  the  cocoon,  a sequenced  release  mechanism  is  triggered.  This  closes 
the  open  end  and  the  cocoon  and  parachute  pack  are  then  released  from  the  aircraft.  The  release  of  the  es- 
cape module  from  the  aircraft  triggers  an  oxygen  supply  to  a mask  within  the  cocoon,  and  this  activates  an 
automatic  parachute  recovery  system.  As  soon  as  one  module  is  released,  the  remaining  modules  are  power 
indexed  toward  the  slide  and  another  cocoon  is  positioned  in  the  slide  ready  to  receive  the  next  passenger. 
This  sequence  is  estimated  to  require  6 seconds. 

As  the  escape  module  is  released,  a 1.2  m (4  ft)  diameter  Hemisflo  drogue  chute  is  deployed  to  provide 
immediate  stability,  deceleration,  and  controlled  descent  from  high  altitude.  When  descent  is  made  to 
4,572  m (15,000  ft)  altitude,  an  aneroid-controlled  actuator  opens  the  main  parachute  pack,  and  the  9 m 
(29.7  ft)  diameter  "skysail"  parachute  is  deployed  by  the  drogue,  utilizing  the  sleeve  principle  (4%  reefing 
is  used  for  1 second  to  maintain  opening  shocks  under  10  G's).  In  egress  below  4,572  m (15,000  ft)  a 3- 
second  time  delay  is  employed.  The  egress  sequence  and  cocoon  containment  system  is  illustrated  in  Fig.  105. 
This  concept  is  oassive  in  the  sense  that  the  only  action  necessary  from  the  occupant,  once  he  has  jumped 
into  the  slide,  is  to  use  a control  handle  to  release  the  parachute  after  the  cocoon  has  landed.  This  sys- 
tem would  not  appear  to  be  usable  in  a case  where  the  aircraft  was  violently  thrown  about,  or  ended  up  in 
an  unusual  attitude,  which  would  prevent  passengers  from  reaching  the  escape  slides.  There  might  also  be 
a reluctance  for  uninitiated  individuals  to  "trust"  jumping  into  any  opening  not  knowing  whether  there  would 
in  fact  be  a chute  to  catch  them  or  not.  Also,  at  the  given  rate  of  10  individual  "bail-outs"  per  minute 
per  slide,  it  would  take  considerable  total  time  to  evacuate  a loaded  aircraft,  under  conditions  in  which 
little  time  would  presumably  be  available. 


Fig.  105.  Rapidjet  emergency  inflight  egress  system,  deployment, 
and  passenger  cocoon  container  [McIntyre,  1969  (1099)]. 


7.6.4  Parachute  Lowering  of  Fuselage.  Ordnance  techniques  have  developed  to  the  point  where  it  is 
possible  for  the  pilot  to  increase  survivability  by  jettisoning  under  exact  control  various  parts  of  the 
aircraft,  such  as  an  engine,  the  complete  baggage  compartment  or  large  sections  of  the  fuselage  for  fast 
passenger  egress  under  very  extreme  conditions  [Sipes,  1967  (1079)].  In  adapting  this  technique  to  in- 
flight evacuation  the  module  could  consist  of  a section  of  seats  which  would  be  separately  encapsulated 
and  ejected  as  a unit,  or  jettisoned  from  the  fuselage  in  separate  compartments.  However,  the  effects  of 
fliqht  dynamics  on  jettisoned  sections  could  compromise  a safe  deployment  in  some  environments. 

In  1969  Snyder  and  Stapp  (1103)  proposed  several  concepts  for  inflight  emergency  egress,  presenting 
the  aeromedical  aspects  of  a survival  envelope  necessary  for  salvage  of  a disabled  air  transport  at  sonic 
speeds  and  high  altitudes.  Fig.  106  shows  the  concept  of  inflight  ejection  of  encapsulated  compartments 
of  a disabled  aircraft.  Such  a system  could  not  be  retrofitted  and  would  have  to  be  designed  into  a future 
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aircraft  However,  while  such  a system  is  utilized  in  military  aircraft  having  a small  number  of  highly 
trained  crew  members,  such  as  the  B-l  [Beers,  1974  (848)]  or  F-lll  [Shaffer  and  Brinkley,  1974  (17)],  it 
probably  would  not  be  practical  for  air  transport  consideration,  even  though  technically  within  the  state- 
of-the-art. 


Fiq.  106.  Infliqht  ejection  of  encapsulated  compartments  from  disabled  airliner 
fSnyder  and  StaDD,  1969  (1103)]. 


Yet  another  concept  resultinq  from  studies  conducted  for  NASA,  combining  tail  evacuation  and  capsule- 
pod  emergency  escape,  is  illustrated  in  Fig.  107  [Yost  et  al . , 1970  (789)]. 
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Still  another  concept  is  illustrated  in  Fig.  108.  In  this  scheme  the  wings  (or  engines)  and  tail 
are  separated  by  explosive  technology  (developed  for  military  aircraft),  drogue  chutes  then  deploy  to 
slow  the  velocity  of  the  fuselage,  and  finally  parachutes  (probably  multiple  canopies)  lower  the  fuselage 
to  the  ground  (as  with  a space  vehicle).  The  objective  in  this  case  is  to  salvage  the  occupants  by  keeping 
them  as  intact  as  possible  in  their  own  environment. 


A.  In-flight  emergency. 


v Vt? 

* JV, 


Separation  of  engines,  wings,  tail 
structures  from  fuselage;  slowing 
of  forward  velocity  with  small 
drogue  chutes. 


C. 


Parachute  lowering  of  intact 
fuselage  to  soft  landing. 


Fig.  108.  Concept  of  safe  parachute  lowering  of  passengers  and  crew  in  fuselage  of  air  transport 
following  major  structural  failure  in  flight  [Snyder  and  Stapp,  1969  (1103)]. 


Among  many  problems  which  would  be  anticipated  in  the  development  and  testing  of  such  a concept  are 
the  fundamental  ones  of  how  to  ensure  that  the  separation,  braking  and  parachute  deployment  systems  would 
be  intact  and  reliable  after  an  inflight  structural  failure  and  how  to  prevent  (with  100%  reliability) 
inadvertent  activation  of  any  of  these  systems.  Other  very  fundamental  considerations  are  cost  of  struc- 
tural modifications,  and  weight  (increased  fuel  usage)  penalties.  While  the  concept  of  lowering  the  pas- 
sengers to  the  ground  within  tolerable  impact  velocities,  using  the  aircraft  emergency  oxygen  system,  and 
keeping  the  thermal  environment  within  tolerable  limits  may  be  possible  under  favorable  environments,  the 
complexity  of  accomplishing  these  objectives  in  future  aircraft  would  require  considerable  effort  to  de- 
velop and  evaluate.  A similar  technique  has  been  previously  considered  in  solving  the  problem  of  saving 
helicopter  crews  and  passengers  from  otherwise  fatal  mid-air  emergencies  [Arnold  and  Pollard,  1968  (1088); 
Teledyne  McCormick  Selph,  n.d.  (1104)]. 

While  the  foregoing  concepts  are  only  unproven  ideas,  the  fact  remains  that  the  area  of  emergency 
inflight  egress  for  occupants  of  air  transport  aircraft  has  been  largely  ignored.  This  is  in  contrast 
to  research  relating  to  advanced  inflight  egress  for  aircrews  and  spacecraft,  which  has  made  considerable 
progress.  The  systems  described  in  this  section  are  within  the  state-of-the-art  technically,  however, 
until  research  programs  are  conducted  to  seriously  test  and  assess  an  entire  system  it  is  not  possible  to 
determine  at  this  time  just  how  feasible  these  or  other  concepts  may  be.  It  would  be  unfortunate  if  the 
impetus  for  such  research  is  the  result  of  an  inflight  collision  of  two  commercial  air  transports,  as 
nearly  occurred  twice  within  9 days  in  November,  1975,  although  the  standard  solution  in  such  a case  would 
be  to  increase  the  complexity  of  the  avionics  and  airways  system.  On  the  other  hand,  each  of  the  inflight 
emergency  egress  concepts  examined  to  date  (including  the  author's)  may  well  involve  a higher  probability 
of  hazard  created  by  the  proposed  solutions,  as  indicated.  The  distinction  between  "practical"  and  "tech- 
nically feasible"  is  often  fine,  but  certainly  this  is  an  area  where  further  study  might  be  beneficial. 


8.  CONCLUSIONS 

Analysis  of  current  civil  and  military  air  transport  aircraft  accidents  suggests  that  many  injuries 
and  fatalities  that  occur  in  otherwise  survivable  accidents  could  have  been  prevented  or  reduced.  Since 
all  accidents  cannot  be  prevented,  considerable  benefits  in  terms  of  lives  saved  could  be  achieved  by  more 
fully  utilizing  advanced  protective  systems,  devices,  or  concepts  currently  available  as  state-of-the-art 
technology.  The  objective  of  this  study  has  been  to  gather  and  review  those  concepts  which  might  have 
application  to  improving  air  transport  crash  impact  and  emergency  egress  survivability.  The  following 
steps  were  followed  to  accomplish  this  objective: 
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First,  a review  of  future  design  trends  was  conducted. 

Second,  NATO  member  air  carrier  accident  experience  was  analyzed  to  determine  what  impact  and 
egress  problems  exist  and  to  identify  those  areas  where  there  is  the  greatest  need  for  improvement. 

Besides  the  need  for  greater  occupant  protection  against  post-crash  fire,  smoke,  toxic  fumes,  and  impact 
(seating/restraint) , a number  of  deficiencies  were  observed  and  have  been  pointed  out  in  emergency  lighting, 
passenger  warning  systems,  and  aisle  and  evacuation  markers. 

Third,  using  the  background  of  accident  experience  as  a basis,  approximately  150  state-of-the-art 
techniques,  devices,  and  concepts  available  through  advanced  technology  were  evaluated  which  may  have 
application  to  both  civil  and  military  air  transports.  To  provide  an  objective  means  of  evaluation,  a 
systems  analysis  approach  was  utilized  to  determine  the  most  promising  concepts. 

The  principal  conclusions  may  be  summarized  as  follows: 

A.  Accident  Experience 

1 . In-Flight  Accidents 

Medical  and  human  factors  aspects  of  air  transport  accidents  have  had  limited  investigation 
and  reporting,  with  the  result  that  it  is  not  possible  to  precisely  determine  the  cause  of  occupant  trauma 
nor  the  emergency  egress  problems  in  many  cases.  In-flight  hazards  of  mid-air  collision,  turbulence,  bird 
strikes,  explosion,  fire  or  structural  failure,  takeoff  and  landing  crashes,  ditching,  and  emergency 
egress  experience  were  examined  primarily  for  the  period  1964-1975.  From  the  comparatively  limited  data 
available  it  was  found  that  fatalities  and  trauma  (in  otherwise  survivable  crashes)  may  be  primarily 
attributed  to  smoke,  fire  and  toxic  fumes,  followed  secondarily  by  impact  trauma. 

. Mid-Air  Collisions  Reported  from  1964  through  1971  included  12  U.S.  air  carriers,  with 
239  fatalities.  In  one  y e a r ( 1 968 ) 2,230  n ear  misses  were  reported,  including  317  in  which  the  miss  was 
"critical"  (only  due  to  chance  there  was  no  collision)  and  during  the  first  ten  months  of  1975  there  were 
207  officially  reported  "Hazardous"  near-misses,  suggesting  that  fatalities  from  mid-air  collisions  in 
the  future  could  take  a significant  jump. 

• Turbulence  often  has  resulted  in  serious  injury,  95  stewardesses  and  241  passengers  were 
injured  in  70  air  carrier  turbulence  accidents  between  1968-1971  alone  (116  serious),  while  15  were  injured 
in  a single  accident  in  1974,  and  17  injuries  have  been  reported  for  a portion  of  1975. 

• Bird  Strikes  have  been  attributed  as  the  cause  of  63  accidents,  17  involving  air  carriers 
between  1964-1973.  Two  fatal  crashes  occurring  in  1960  and  1962  resulted  in  75  fatalities,  and  in  1975  a 
McDonnell  Douglas  DC-10  crash  was  also  identified  as  a bird  strike. 

. In-Flight  Explosions  have  been  reported  world-wide  for  18  air  transport  catastrophies , 
and  have  included  two  NATO  member  Boeing  707 1 s and  a McDonnell  Douglas  DC-9.  A recent  Boeing  720  des- 
truction was  also  attributed  to  this  cause,  although  the  investigation  is  not  complete.  These  four 
accidents  resulted  in  242  fatalities.  In-flight  fire  is  not  rare  but  has  not  been  identified  as  a sig- 
nificant cause  of  major  passenger-carrying  accidents.  Structural  failure  also  has  generally  been  the 
result  of  explosive  decompression,  collision,  explosion,  fire,  or  other  primary  cause. 

. Explosive  Decompression  is  required  to  be  reported  to  the  FAA  only  when  related  to 
"mechanical  reliability  reports,1'  so  the  actual  number  of  rapid  or  explosive  decompressions  (as  well  as 
inadvertent  deployment  and  failure  of  emergency  oxygen  systems)  is  not  known.  Between  mid-1968  and  mid- 
1970,  253  cases  were  reported.  Rapid  decompression  has  been  responsible  for  175  fatalities  (of  330 
occupants)  in  a 1975  USAF  Lockheed  C-5A  crash,  for  345  fatalities  in  (the  worst  crash  in  history)  a 
McDonnell  Douglas  DC-10  in  1974,  and  for  ten  passengers  seriously  injured  and  subsequently  hospitalized 
in  a 1975  DC-10  decompression. 

2.  Emergency  Ground  Egress 

Most  injuries  and  fatalities  may  be  attributed  to  crash  impacts  which  occur  in  take-off  or 
landing  phases  of  flight.  Review  of  accident  experience  to  date  indicates  an  alarming  number  of  injuries 
occurring  during  emergency  ground  egress,  indicating  that  improvement  is  needed. 

Contributing  factors  found  include: 

. Narrow  aisle  widths  in  coach  sections  (often  40%  less  than  in  first  class)  which  restricts 
emergency  evacuation  capability. 

. Blockage  of  aisles  and  exits  by  falling  ceiling  panels,  failure  of  galley  doors,  overhead 
baggage  doors,  stowed  emergency  equipment,  and  hat  racks  spilling  contents  in  aisles.  Net  restraints  or 
improved  door  retension  capabilities  are  necessary. 

. Inability  to  use  exits,  because  they  are  jammed,  blocked,  can't  be  opened,  or  due  to  fire. 

. Lack  of  emergency  exterior  lighting. 

. Inadequate  warning  or  briefing  of  passengers  prior  to  crash  or  ditching  (the  "bull  horn" 
has  not  been  reported  as  used  in  any  emergency). 

. Failure  due  to  functional  or  environmental  causes  of  emergency  equipment,  rafts,  slides  (did 
not  inflate,  punctured,  too  high  off  ground,  too  steep  attitude,  into  fire,  wind  carried).  Serious 
injuries  to  volunteer  subjects  in  certification  compliance  tests  are  common  from  these  causes,  even 
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though  carried  out  under  optimum  conditions). 

. Failure  of  the  seat  restraint  system  (seats,  belts,  anchorages)  is  a major  cause  of  injuries  and 
fatalities.  The  impact  of  the  passenger  or  crew  member  with  rigid  non-yielding  structure  such  as  seat 
back  trays  also  contributes. 

. Lack  of  any  occupant  protection  whatever  in  emergency  egress  during  flame,  smoke,  or  toxic  fume 
conditions  appears  to  be  a primary  cause  of  fatalities  and  trauma. 

3.  Pi tchings 

Since  1964  there  has  only  been  one  intentional  ditching  of  a jet  transport  aircraft  and  three 
unintentional  water  landings  which  could  be  classed  as  ditchings.  These  involved  inadvertent  ditching  on 
takeoff  of  a Lockheed  C- 1 41 A with  fatalities  to  7 of  9 crew,  and  of  two  McDonnell  Douglas  DC-8  transports: 
a Japan  Air  Lines  flight  that  landed  in  the  ocean  3-1/2  miles  short  of  San  Francisco  in  1968,  with  107 
occupants,  and  a Scandinavian  Airlines  landing  in  Santa  Monica  Bay,  California,  short  of  the  runway,  in 
which  of  45  aboard,  12  passengers  and  three  cabin  attendants  were  drowned  or  received  fatal  injuries,  11 

passengers  and  six  crew  were  injured,  and  only  13  passengers  escaped  injury.  Studies  have  shown  that 

high-wing  air  transports  flood  in  the  passenger  compartment  up  to  wing  level  within  5-30  seconds.  Air- 
craft such  as  the  Lockheed  C-141  require  an  average  of  7-1/2  minutes  to  evacuate  a full  load  of  passengers 
While  air  carrier  ditchings  are  rare  it  is  apparent  that  high-wing  aircraft  may  not  be  expected  to  ditch 
with  the  success  of  comparable  low  wing  transports. 

The  intentional  ditching  of  an  ONA  (operating  as  ALM)  McDonnell  Douglass  DC-9  near  St.  Croix, 

Virgin  Islands,  in  1970  is  the  only  known  case  of  an  intentional  ditching  of  a scheduled  jet  air  transport 
aircraft  to  date.  Of  63  aboard  there  were  23  fatalities.  A large  number  of  adverse  contributing  factors 
were  found  to  influence  survival,  including  incomplete  briefing  and  failure  of  crew  to  warn  of  impact. 
Injuries  and  fatalities  were  due  to  unrestrained  passengers  thrown  forward  at  impact  (some  while  standing 
in  aisles),  to  at  least  seven  failures  of  seat  belts  (metal  to  fabric)  with  slippage  of  others,  to  con- 
tents of  galley  blocking  one  emergency  exit,  and  to  the  loss  of  all  life  rafts.  This  ditching  impact  left 

the  fuselage  intact,  which  floated  for  5-6  minutes.  All  survivors  egressed  within  2-3  minutes,  but  the 
loss  of  life  rafts  pointed  to  the  need  for  improved  emergency  egress  devices,  along  with  retension  of 
galley  and  hat-rack  baggage  stowage,  improved  seating,  restraint  systems,  and  crew  training. 

B.  Advanced  Technology 

1 . Smoke  Hood 

The  need  for  post-crash  protection  of  passengers  and  crew  from  disabling  and  fatal  effects 
of  toxic  fumes,  smoke,  and  flame  has  been  well  documented.  Some  17  protective  smokehood  concepts  or 
developments  were  evaluated  in  this  study.  At  present,  although  a production  smokehood  is  used  in  the 
President's  aircraft,  many  FAA  and  corporate  aircraft,  and  by  knowledgeable  individual  travelers,  there  is 
no  FAA  requirement  to  provide  this  protection  to  air  carrier  passengers  and  crew.  In  January  1969  an  FAA 
NPRM  to  require  that  protective  smokehoods  be  carried  in  all  civil  air  carriers  was  initiated  but  with- 
drawn nine  months  later.  Several  protective  hood  devices  developed  for  non-aviation-related  purposes 
offer  a self-generating  air  supply  for  up  to  15  minutes.  However,  the  increased  complexity  of  use,  and 
increased  cost,  do  not  make  them  as  practical  as  a rebreathing  device  at  this  time.  Civil  air  carriers 
are  required  by  FAA  to  demonstrate  that  all  passengers  can  be  evacuated  within  90  seconds,  but  FAA  burn 
tests  have  demonstrated  that  after  three  minutes,  heat  may  preclude  survival  in  current  aircraft  interiors 
Thus  a requirement  for  extended  breathing  time  is  not  realistic.  The  Sheldahl  septal  seal  (type  S)  smoke- 
hood, is  a current  production  rebreathing  device  which  can  offer  significant  protection  to  1472°F.  This 
device  is  constructed  of  metal ized  polyimide  film  (Kapton),  offers  4-6  minutes  rebreathing  time,  (about 
20  liter  vol.),  and  has  been  subjected  to  extensive  FAA  testing  since  1965.  A potential  hazard  related 
to  time  exposure  beyond  critical  rebreathing  (3-6  minutes)  is  far  outweighed  by  the  survival  benefits  pro- 
vided. It  is  highly  recommended  that  a smokehood  be  made  immediately  available  to  passengers  and  crew  of 
all  civil  and  military  air  transport  aircraft. 

2.  Passenger  Seating  and  Restraint  Systems. 

The  state-of-the-art  in  occupant  protection  and  passenger  seating  has  greatly  exceeded  current 
air  transport  requirements  (which  have  not  significantly  changed  since  established  a generation  ago). 
Considerable  documentation  from  accident  investigation  has  cited  seat  and  restraint  failure  as  a major 
cause  of  fatality  and  injury  in  a large  number  of  otherwise  survivable  accidents.  Although  there  are  no 
FAA  standards  dealing  with  occupant  protection  above  a "minor"  crash  landing,  review  of  human  tolerance 
research  overwhelmingly  has  documented  the  adequately  restrained  individual's  ability  to  withstand 
accelerative  forces  considerably  greater  than  the  forces  generated  in  most  air  carrier  crashes.  This  is 
most  simply  expressed,  as  cited  in  the  text  of  nearly  a decade  ago,  that  we  have  40G  people  riding  in  20G 
airplanes  and  sitting  in  9G  seats  and  restraint  systems.  Technology  has  been  available  for  some  time  to 
provide  passenger  protection  far  above  that  currently  available. 

. Rearward-Facing  Passenger  Seating.  In  comparison  with  forward  (or  sideward)  body 
orientations,  rearward  facing  passenger  seating  provides  the  maximum  protection  from  impact  forces.  The 
major  advantages  are  that  crash  loads  are  distributed  over  a larger  portion  of  the  body  and  the  head  is 
better  protected.  Such  seating  is  used  in  RAF  transports  and  has  been  the  predominant  passenger  orienta- 
tion in  USAF  transports  for  25  years  (The  USAF  adopted  in  1951  a 250  lb.  occupant  criteria  4,000  lb 
(1,814  Kg)  ultimate  load  in  a 16G  seat,  vs.  the  1976  FAA  requirement  of  1,530  lb  (694  Kg)  ultimate  load 
for  a 170  lb  (77  Kg)  occupant  in  a 9G  seat.)  The  USAF  16G  rearward  facing  seat  was  15  lb  (6.8  Kg)  lighter 
than  the  6G  forward  facing  seat  it  replaced,  and  has  been  found  to  offer  effective  impact  protection.) 

One  accident  study  has  shown  seven  times  less  injury  to  rear-facing  passengers  when  compared  to  frontal 
seated  occupants.  Although  requiring  stronger  seats,  anchorages,  and  seat  backs,  current  technology  can 
provide  rear-ward  facing  seats  of  lighter  weight  as  well  as  greater  strength. 

. The  NASA  Ames  Integral  aircraft  passenger  seat  is  a prime  example  of  the  system  approach 
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and  NASA's  expertise  in  aerospace  technology  combined  to  conceive,  design,  test,  and  develop  from  scratch 
a seat  specifically  for  new-generation  air  transport  use.  Based  upon  study  of  the  failings  of  current 
seats,  it  has  had  extensive  development  and  dynamic  testing  (to  21+G  45+G  ),  or  a demonstrated  protective 

capability  of  2 to  10  times  current  seats.  The  inertia-reel -integral  doubfe-upper-torso  restraint  pro- 
vides additional  protection  against  jackknifing  or  head  and  upper  torso  injury,  and  is  comfortable  to  use. 
Weiqht  has  not  increased.  The  NASA  integrated  seat,  operationally  used  only  in  part  to  date  on  NASA's 
Convair  990  air  transport,  represents  the  state-of-the-art.  As  a considerable  advance  over  current  genera- 
tion seats  it  must  be  highly  recommended  for  current  or  future  air  transport  use. 

. Advanced  active  and  passive  (requiring  no  effort  from  the  occupant)  restraint  systems  were  evaluated 
in  this  study.  Pa s sTv 2 re s train tT  included  over  65  concepts  or  devices,  s u ch~as  webbing  be 1 1 restraints 
which  are  automatically  locked  in  place  when  the  individual  sits  in  the  seat,  deployable  net,  blanket,  and 
air  bag  systems,  transparent  shields,  cushions,  arms  and  barriers,  static/capsule,  and  deployable  head 
restraints.  Inverted  Y-yoke  and  integrated  seat-restraint  harnesses,  which  retract  into  the  seat  and 
incorporate  inertia  reels,  offer  increased  occupant  protection  for  the  passenger  over  conventional  lap 
belts.  However,  they  also  require  stronger  seat  backs  and  anchorages  to  be  an  effective  system.  Although 
a number  of  concepts  were  found  to  be  technically  feasible  several  were  especially  promising,  including 
the  Allied  Chemical  inflaband,  which  combines  a three-point  upper  torso  belt  with  the  advantage  of  a 
passive  inflatable  system,  integrated/inflatable  systems  developed  by  HSRI  for  NHTSA,  and  inflatable  air 
bag  systems. 


. Inflatable  air  bag  passive  restraint  received  particularly  comprehensive  attention  in 
this  study  due  to  the  major  development  and  testing  previously  conducted  for  motor  vehicles  relative  to 
proposed  federal  standards.  Only  very  limited  study  relative  to  aircraft  has  been  conducted,  although 
adaptations  have  been  used  in  the  American  Rockwell  B-l  capsule  landing  shock  attenuators  and  the  General 
Dynamics  F -111  for  side-impact  energy  attenuation.  The  state-of-the-art  relative  to  development,  components, 
design,  crash  sensors,  inflation  energy  sources,  diffusers,  human  volunteer  tests,  aspects  of  noise  and 
toxicity,  and  accident  experience  have  been  reviewed.  Major  problems  which  must  be  resolved  include 
determination  of  a crash  envelope,  including  critical  closing  rates  and  collision  object  definition  for 
use  with  proximity  sensors;  definition  of  crash  G-loads  anticipated  in  aircraft  accidents  with  sufficient 
accuracy  that  hard  landing  or  air  turbulence  can  be  distinguished  from  impact  events;  the  level  of  hazard 
with  respect  to  toxicological  or  other  occupant  physical/physiological  hazards  and  with  respect  to  effect 
on  occupant  egress;  reliability  and  cost  effectiveness  problems,  such  as  possible  structural  changes  in 
the  aircraft,  penalty  for  increased  weight  (could  be  1 to  2t.  in  300-500  passenger  ai rcraft) , -redesigns  of 
seats,  maintenance,  longevity,  cost  in  comparison  with  other  systems.  One  major  problem  involves  crash 
sensing,  and  although  there  are  now  acoustic,  optical,  radar,  radar-impact  switch  combination,  proximity, 
mechanically  extended  probes,  electro-mechanical,  chemical,  and  electromagnetic  systems  and  numerous 
additional  subsystems  under  development,  they  have  not  been  tested  for  use  in  aircraft  crash  environments, 
nor  is  the  effect  of  some  of  these  systems  known  relative  to  airborne  avionics  systems. 

Results  of  extensive  air  bag  tests,  accident  data,  and  human  volunteer  testing  to  date  clearly 
indicate  that  the  air  bag  restraint  system  is  capable  of  offering  excellent  occupant  protection  in  a fron- 
tal mode,  although  it  must  be  combined  with  a lap  belt  (active  system)  to  provide  adequate  lateral  pro- 
tection. The  Diamond  air  bag  system  is  the  only  such  concept  developed  to  date  for  the  back  of  air 
carrier  seats,  but  even  this  is  in  prototype  stage  requiring  further  tests  and  is  at  present  manually 
operated.  It  is  concluded  that  at  this  point  in  the  state-of-the-art,  that  the  NASA  Ames  air  transport 
seat,  and  the  rearward  facing  seat,  as  well  as  several  integral  restraint  systems,  offer  better  all-round 
crash  protection  for  the  air  transport  passenger  than  passive  inflatable  air  bag  systems. 

3.  Aisle  and  Evacuation  Path  Markers 

A number  of  interior  aisle  and  pathmarker  illumination  systems  and  concepts  are  available  which 
could  offer  significant  improvement  for  passenger  egress,  but  none  have  had  adequate  research  for  this 
specific  application  in  a crash  environment. 

. Reflective  tapes  require  illumination  for  effective  utilization,  while  phosphorescent 
or  ultra-violet  markers  require  either  pre-illumination  exposure  or  a special  light  source  for  activation. 

• Sel f-1 umi nous  sources  such  as  Tritium  markers  presently  provide  relatively  low  levels  of 
illumination  without  exceeding  allowable  radioactive  levels. 

. Electro-i 1 luminescence  offers  another  means,  but  requires  a relatively  high  level  of 
electric  current  for  activation. 

. A promising  technique  for  providing  adequate  pathway  illumination,  signs,  and  direc- 
tional markers  involves  chemo- ill um i nes cence  (either  exposure  to  air  or  to  a second  chemical).  This 
could  be  achieved  by  initiation  upon  impact. 

. Adequate  emergency  aisle  markers,  evacuation  markers,  and  egress  sign  illumination  could 
be  provided  by  a gaseous  discharge  system  using  Xenon  strobe  lights,  which  would  be  most  effective  in  a 
smoke-filled  dark  cabin  and  w o u 1 d r e q u ire  on Ty  small  battery  units  for  initiation. 

• Tactile  markers  could  provide  a means  of  emergency  egress  in  the  absence  of  light; 
however,  they  have  been  found  ineffective  in  limited  group  evacuation  testing  and  require  further  devel- 
opment. 


. Directional  pulsating  lights,  using  incandescent  illumination,  appear  to  be  a good 
concept  but  have  not  Veen  tested  in  this  application. 

. Floor-level  lighting  can  be  utilized  by  application  of  present  incandescent  techniques. 

. Aisle  width,  especially  in  coach  class  seating  configurations,  should  be  reassessed  and 
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made  wider  in  future  air  transports  because  of  accident  findings  of  difficulty  in  reaching  egress,  and 
slower  evacuation  time.  The  15  inch  (38  cm)  aisle  width  is  estimated  to  be  exceeded  in  hip  breadth  by 
up  to  10%  of  the  population.  Addition  of  from  2.54-12.7  cm  (1-5  in)  would  assist. 


4.  Passenger  Warning  and  Public  Address  Systems. 

Electronic  public  address  systems  were  not  required  until  September,  1975  by  the  FAA.  The  TWA 
battery-powered  audio/visual  system  with  solid-state  audible  pulsed  alarm  is  designed  for  crew  communi- 
cation only  and  provides  no  alarm  warning  for  passengers;  however,  it  could  provide  an  effective  emergency 
communication  link  between  the  military  pilot  and  loadmaster  or  cabin  crew.  The  same  function  could  be 
improved  through  a solid-state  portable  communications  device,  offering  greater  flexibility.  In  cases  of 
main  communications  failure,  the  battery-powered  portable  bull-horn  is  effective  if  within  reach  of  a 
crew  member  but  has  not  yet  proven ■ useful  in  actual  crash  evacuation.  The  present  military  air  transport 
bell  alarm  system  is  relatively  ineffective  (50%  in  cases  studied)  because  there  is  often  insufficient 
time  for  manual  activation.  Passenger  warning  and  public  address  systems  appear  to  be  areas  where  great 
improvement  is  needed.  A more  reliable  means  of  automatically  communicating  warnings  to  passengers  in 
crash  or  emergency  egress  situations,  as  well  as  post  crash  communication , should  receive  further 
attention. 


5.  Advances  in  Emergency  Egress  Concepts 

. Slide  Devices.  The  current-generation  double-aisle  slide/raft  escape  device  offers 
reasonable  evacuation  capability  for  cabin  doors,  and  in  ditchings  can  save  considerable  time  in  deploying 
rafts.  However,  operational  problems  found  include  non-deployment,  cost  and  time  in  inadvertent  deploy- 
ment, and  injuries  resulting  from  unusual  aircraft  positions  beyond  the  capabilities  of  the  slide  to 
reach  the  terrain.  The  possibility  of  employing  cargo  type  doors  and/or  swing-tail  or  swing-nose  concepts 
for  mass  evacuation  of  future  extra-wide  body  air  transports  is  worthy  of  further  study. 

. The  ELSIE  high-energy  emergency  egress  system,  developed  and  tested  by  the  USAF  in  C-130 
aircraft,  represents  tFe  mos t ad vance a and  potential ly  most  s ignif i cant  technical  improvement  currently 
available  to  instantaneously  provide  emergency  egress  for  passengers  post-crash  and  may  also  serve  a 
function  of  deploying  survival  equipment  such  as  slides,  rafts,  slide/rafts,  beacon  markers,  and  survival 
kits.  This  system  can  be  retrofitted  into  existing  aircraft,  as  is  being  initiated  for  USAF  Lockheed 
C-141  transports.  Despite  the  demonstrated  military  success  with  ELSIE,  application  of  explosive  escape 
technology  to  civil  air  transports  will  require  further  consideration  for  means  of  initiation,  potential 
for  human  error,  inspection  methods,  and  reliability. 

• Heat  Shielding  of  air  transport  cabins  has  been  indicated  in  NASA  tests  (where  the 
fuselage  is  intact  p o s t - c r "as" h J to  be  accomplished  by  utilizing  intumescent  paint,  a technique  similar  to 
that  used  to  protect  Apollo  astronauts.  Significant  protection  has  been  reported  against  smoke,  toxic 
gases  (at  least  5 minutes),  and  heat/flame  (for  about  12  minutes),  for  a weight  penalty  of  0.3  lb  per  sq 
ft  of  protected  surface  area  (1700  lb  for  400,000  lb  gross  weight  air  transport). 

. Ablative  coating  for  overwing  exit  areas  appears  also  feasible.  NASA  is  presently 
exploring  feasibility  of  effective  flexible  coatings.  Emergency  egress  devices  such  as  escape  slides  or 
raft/slide  combinations  could  use  a flexible  ablative  coating  to  protect  them  for  a short  time  duration 
against  flame  damage. 

. Emergency  In-flight  Egress.  At  present  there  is  no  way  to  survive  a major  in-flight 
accident,  although  emergency  in-flight  egress  has  long  been  provided  for  test  flight  crews  of  the  same 
air  transport  aircraft  by  means  of  escape  chutes  installed  in  the  flight  deck  of  prototype  models.  Of 
four  techniques  reviewed,  drogue-parachute  deployment  to  slow  and  lower  the  intact-disabled  cabin,  after 
separation  of  the  engines  wings,  and  empannage  to  reduce  weight,  appears  to  be  most  promising.  This 
concept  is  one  of  several  being  developed  for  large  passenger-carrying  helicopter  recovery.  However, 
while  this  and  other  concepts  appear  to  be  technically  feasible,  further  study  is  necessary  to  evaluate 
weight  (fuel/range)  penalties,  cost,  and  other  aspects  of  the  entire  environmental  system.  To  date  there 
has  been  no  clear  requirement,  based  upon  past  accident  experience,  for  future  in-flight  emergency  egress; 
however  this  may  only  have  been  a matter  of  chance  as  documented  by  the  volume  of  past  near-miss 
incidents  on  record. 

. Trends  in  next-generation  air  transports  beyond  present  supersonic  and  subsonic  wide- 
bodied aircraft  are  being  influenced  by  concerns  for  energy  conservation,  with  advanced  designed  proposed 
for  exotic  liquid-hydrogen-fueled  and  laminarized-flow  aircraft.  Very  large  1000-passenger  transports 
and  cargo  aircraft  have  been  conceived,  such  as  the  375-ft  (114.3  m)  2,400-t  span-loaded  flying  wing  with 

six  times  the  payload  of  the  Boeing  747F  and  utilizing  air  cushion  landing  systems,  the  Dornier  1000-t 

capacity,  and  the  very  wide  body  (five  90  ft  (27m)  bays)  cargo  transports.  ST0L  and  V/ST0L  air  carrier 
development  may  also  be  an  important  projection.  However,  historically  air  transport  design  and  standards 
have  not  incorporated  state-of-the-art  techniques  or  devices  relative  to  occupant  crash  impact  protection 
and  emergency  egress. 

It  is  concluded  that  the  present  rate  of  fatalities  and  injuries  incurred  in  otherwise  survivable 
a cc  i de  n t s i n current  air  carrier  a ire  raft  co  u Id  be  si g n i f i ca  n 1 1 y r e/du cedldy  use  of  a s mo  ke  h oo  d , a n d u s e o f 

either  the  NASA  Ames  Integrated  airline  seat  or  rear-facTng  seatiTigT  Cabin  heat  shielding  and  ablative 

fTexTBTe coatings util izing  intumescent  paint,  also  appear  promising.  Other  improvements  are  needed  in 
the  slide/raft,  in  emergency  illumination,  in  passenger  warning  devices,  and  in  aisle  and  pathway  path- 
markers  which  could  utilize  xeon  gaseous  discharge,  chemo-il 1 uminescence  or  floor  level  and  pulsating 
incandescent  techniques.  Some  concepts  such  as  the  ELSIE  high-energy  emergency  egress  system  technologi- 
cally offer  a significant  advance  in  emergency  escape  capability,  and  should  be  considered  for  future  air 
transport  design,  although  requiring  further  study  before  the  feasibility  of  adaptation  to  civil  air 
carrier  operation  can  be  determined.  In  view  of  the  rapidly  expanding  technological  base,  to  achieve 
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optimum  occupant  crash  protection  and  survival  will  require  much  greater  emphasis  upon  research  in  those 
areas  and  in  insuring  that  the  state-of-the-art  be  considered  in  future  air  transport  design. 
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204.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Aloha  Airlines,  Inc.,  Vickers 

Viscount  Model  7450,  N7 415,  Honolulu  International  Airport,  Honolulu,  Hawaii,  August  8,  1 971 . 
Washington,  D.C.,  Report  No.  NTSB-AAR-72-2,  29  December,  1971. 

205.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Monmouth  Airlines,  Inc., 

Scheduled  Air  Taxi,  Beech  99,  N-986  MA,  A 1J  entown,  ~ Bethl  ehem-Easton  Airp^oH,  AlTe~ntown, 

Pennsyl  vanTa  ,~~0ctober  24,  1971.  Washington,  D.C.,  Report  No.  NTSB-AAR-72-3,  29  December,  1971. 

206.  National  Transportation  Safety  Board.  Aircraft  Accident  Reports.  Brief  Format.  U.S.  Civilian 

Aviation.  1971  Accidents.  Issues  Nos.  1,  2,  3,  4,  5 and  Supplement.  Washington,  D.C., 

Report  Nos.  NTSB-BA-72-4 , 6,  7,  73-1,  5,  1972. 
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National  Transportation  Safety  Board.  A Preliminary  Analysis  of  Aircraft  Accident  Data.  U.S. 

Civil  Aviation  1971 . Washington,  D.C.',  Report  No.  NTSB-APA-72-1 , 15  March,  1972. 

208.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Western  Air  Lines,  Inc.,  Boeing 

720-047B,  N3166,  Ontario  International  Airport,  Ontario,  California,  March  31,  1971. 

Washington,  D'.C. “Report  No.  NTSB-AAR-72-18,  1972. 

209.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Capitol  International  Airways, 

Inc.,  DC-8-63F,  N4909C,  Anchorage,  Alaska,  November  27,  1970.  Washington,  D.C.,  Report  No. 
NTSfe-72-V2,29  March,  1972. 

210.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Southern  Airways,  Inc.,  DC-9, 

N97S,  Tri  State  Airport,  Huntington,  West  Virginia,  November  14,  1 970 . Washington,  D.C., 

Report  No.  NTSB-AAR-72-11 , 14  April,  1972. 

211.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Chicago  and  Southern  Airways, 

Inc.,  Beech  E1BS  ( ATEC0  Westwind  II)  N51CS,  Peoria,  Illinois,  October  2l  , I97TT  Washington,  D.C., 
Report  No.'  NT'SB-AAR-72-1  5,  19  April  , 1972. 

212.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Pan  American  World  Airways,  Inc., 

Boeing  747-121,  N739PA,  Near  Nantucket,  Massachusetts  "November  4,  1970~  Washington,  D.C., 

Report  No.  NTS1-AAR-72-Y4 , 3 May,  1972. 

213.  National  Transportation  Safety  Board.  A Study  of  U.S.  Air  Carrier  Accidents  1964-1969. 

Washington,  D.C.,  Report  No.  NTSB-AAS-72-5,  10  May,  1972. 

214.  National  Transportation  Safety  Board.  Ai rcraft  Accident  Report.  Pan  American  World  Airways,  Inc., 

Boeing,  N747PA,  Flight  845,  San  Francisco,  California,  July  30,  197T!  Washington,  D.C., 

Report  No.  NTSB-AAB-72-1 7 , 24  May,  1972. 

215.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Apache  Airlines,  Inc., 

De  Havilland  DH-104-7AXC,  N4922V,  Cool idge,  Arizona,  May  6,  1971.  Washington,  D.C.,  Report  No. 

1 June,  1972. 

216.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Allegheny  Air! ines , Inc., 

Allison  Prop  Jet  Convair  340/440,  N5B32,  New  Haven,  Connecticut,  June  7,1 971 . 'Washington,  D.C., 
Report"  No.  NTSB-AAR-72-20,  1 June,  ~ 

217.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Aero  Taxi,  Beech  E18S,  N42A, 

Cleveland,  Ohio,  June  22,  1972.  Washington,  D.C.,  Report  No.  ATSB-AAR-72-33 , 20  December,  1972. 

218.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  National  Airlines,  Inc.,  Boeing 

747-135,  N77772,  Near  Lake  Charles,  Louisiana,  January  4,  1972.  Washington,  D.C.,  Report  No. 

NTSB-AAR-72-21  , 12  July,  1972. 

219.  National  Transportation  Safety  Board.  Aircraft  Incident  Report.  Eastern  Air  Lines,  Inc.,  Boeing 

727-100,  N8168G,  Flight  9701,  Atlanta,  Georgia,  December  21,  1971.  Washington,  D.C.,  Report  No. 
NTSB-AAR-72-22 , 26  July ,'  1972. 

220.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Alii  Air  Hawaii,  Inc.,  Beech 

D18S,  N5642V,  Kalohi  Channel,  Hawaiian  Islands,  February  22,  1972.  Wash i ng ton , D.C.,  Report  No. 

^ juTyrmr. 

221.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Sun  Valley  Airlines,  Inc., 

Beech  65B-80,  N1027C,  Fairfield,  Idaho,  Feb  r ua  ry  20 , 1 97  2 . Wa  s h i n a to  n , D.C. , Report  No.  NTSB- 

AAR-72^F,‘T0August.l972: 

222.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Northwest  Airlines,  Inc., 

Boeing  747-151,  N606  U.S.,  Over  the  North  Pacific  Ocean,  105  Nautical  Mi fes  West~of  1 50~  East 
Longitude  at  36  North  Lati  tude,  AprfM2,  1972.  Washington,  D.C . , Report  No . N TSB  -AA  R - 7 2 - 27 , 

4 October,  1972. 

223.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Alaska  Airlines,  Inc.,  Boeing 

727  , N2969G,  Near  Juneau,  Alaska,  September  4,  1971  . ' Washington',' D'.T.  ,’ Report  No . NTSl-AAR- 
72-28,  13  October  ,_1 972. 

224.  National  Transportation  Safety  Board.  Aircraft  Incident  Report.  Continental  Airlines,  Inc., 

McDonnell  Douglas  DC-10,  N68041 , Tucson,  Arizona,  May  2,  1972.  Washington,*  D.C. , Report  No. 
nTSB-AAR-72-29,  IB  October,  1972. 

225.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Eastern  Ai rl ines , Inc.,  DC-9-31, 

N8961E,  Fort  Lauderdale,  Florida,  May  IB,  1972.  Washington,  D.C.,  Report  No.  NTSB-AAR-72-31 , 

13  December,  1972. 

226.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Puerto  Rico  International 

Airlines  (PRINAIR),  Inc.,  De  Havilland  UFTTR , N554PR,  Ponce,  Puerto  RTccT,  June  24 , 1 972 . 

WashTng  ton , D . C . , Report  No . NTSB-AAR- 72  -34*,*  50  December,  1972. 
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227.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Eastern  Air  Lines,  Inc.,  L-1Q11, 

N310EA,  Miami,  Florida,  December  29,  1972.  Washington,  D.C.,  Report  No.  NTSB-AAR-73-1 4, 

14  June,  1973. 

228.  National  Transportation  Safety  Board.  Aircraft  Accident  Reports.  Brief  Format,  U.S.  Civilian 

Aviation.  Issues  Number  2-5  and  Supplemental  Issue  of  1973  Accidents.  Washington,  D.C. , 

Report  Nos.  NTSB-BA-73-9,  74-1,  2,  3,  and  5,  1973. 

229.  National  Transportation  Safety  Board.  Aircraft  Accident  Reports.  Brief  Format.  U.S.  Civil 

Aviation.  Issues  No.  1,  2,  and  3 and  Supplement  of  1972  Accidents.  Washington,  D.C.,  Reports 
Nos.  NTSB-BA-73-2,  3,  4,  10,  1973. 

230.  National  Transportation  Safetv  Board.  Aircraft  Accident  Report.  Pan  Alaska  Airways,  Ltd.,  Cessna 

310C,  N1812H,  Missinq  between  Anchorage  and  Juneau , Alaska,  October  16,  1 972.  Washington,  D.C., 
Report  No.  NTSB-AAR-72-1 , 31  January,  1973. 

231.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  American  Airlines,  Inc., 

McDonnell  Douglas  DC - 1 0-1 0 , N103AA,  Near  Windsor,  Ontario,  Canada,  June  12,  1 97 2 . 

Washington,  D.C.,  Report  No.  NTSB-AAR-73-2 , 28  February,  1973. 

232.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Delta  Air  Lines,  Inc.,  McDonnell 

Douglas  DC-9-14,  N33Q5L,  Greater  Southwest  InternationaT  Airport,  Fort  Worth,  Texas,  May  30,  1 972. 
Washington,  D.C. ,'  Report  No.  NTSB-AAR-73-3,  13  March,  1973. 

233.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Trans  World  Airlines,  Inc., 

Boeing  7 07 - 331  C , N 1 57 1 2 San  Francisco  International  Airport,  San  Francisco,  Cal iforni a , Se ptember 
13,  1972"  Washington,  D.C.","  Report  No.  NTSB-AAR-73-4,  14  March,  1973. 

234.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  North  American  Rockwell,  Inc., 

Turbo  Commander  690,  N1NR,  Wellsburg,  West  Virginia,  Auqust  14,  1972.  Washington,  D.C.,  Report  No. 
NTSB-AAR-73-5,  21  March,  1973. 

235.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  Delta  Airlines,  McDonnell 

Douglas  DC-8-61,  N1302L,  Near  Las  Vegas,  Nevada,  February  28,  1973.  Washington,  D.C.,  Report  No. 
0AK-73-A-P025,  25  March,  1973". 

236.  National  Transportation  Safetv  Board.  Aircraft  Accident  Report.  Spectrum  Air,  Inc.,  Sabre  Mark  5, 

N275X,  Sacramento  Executive  Airport,  Sacramento,  California,  September  24,  1972.  Washington,  D.C. 
Report  No.  NTSB-AAR-73-6,  28  March,  1973. 

237.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Jugoslovenski  Aerotransport 

(JAT),  Boeing  707-321,  YU-AGA,  John  F.  Kennedy  International  Airport,  Jamaica,  New  York,  Auqust 
13,  1972.  Washington,  D.C.,  Report  No.  NTSB-AAR-73-7 , 4 April,  1973. 

238.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Mohawk  Airlines,  Inc.,  Fairchild 

Hiller  FH-227B,  N7818M,  Albany,  New  York,  March~T,  1972.  Washington,  D.C.,  Report  No.  NTSB-AAR- 
73-8,"  lY  April , 1 973. 

239.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Cessna  182,  N70586,  Duluth 

International  Airport,  Duluth,  Minnesota,  November  8,  1972.  Washington,  D.C.,  Report  No.  NTSB- 
is'  "April’,  T 9 73 . 

240.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Trans  World  Airlines,  Inc., 

Boeing  707-331C,  N788TW,  John  F.  Kennedy  International  Airport,  Jamaica,  New  York,  December  12, 
1972.  Washington,  D.C.,  Report  No. ' NTSB-AAR-73-1 1 V 2 May,  1 973. 

241.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  United  Airlines,  Boeing 

727,  N7002,  Near  Harrisburg,  Pennsylvania,  March  17,  1973.  Washington,  D.C.,  Report  No. 

NYC-73-A-N1 23 , 8 May,  1973. 

242.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  Northwest  Airlines,  Inc., 

Boeing  747,  N601US,  Near  Tal 1 ahassee,  Florida,  April  26,  1973.  Washington,  D.C.,  Report  No. 
MIA-73-A-M050,  24  May,  1973. 

243.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Machinery  Buyers  Corporation, 

Learjet  Model  24,  N454RN,  Atlanta,  Georg T a , Fe b r u a ry  26 , 1 97 3 . Washington,  D.C.,  Report  No. 
NTSB-AAR-73-1 2 , 30  May,  1973. 

244.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Northwest  Airlines,  Inc.,  Boeing 

747-151,  N602US,  Miami,  Florida,  December  15,  1972.  Washington,  D.C.,  Report  No.  NTSB-AAR-73-1 3, 

30"  May,  1973. 

245.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  Delta  Air  Lines,  Douglas 

DC-9-32,  N33247,  Enroute  New  York,  New  York  to  Atlanta,  Georgia,  Apri1~T,H~973^  Washington,  D.C . , 
Report  No.  MIA-73-A-M095,  12  “June,  1973. 

246.  National  Transportation  Safety  Board.  Western  Air  Lines,  Inc.,  Boeing  737,  N4508W,  Flight  415, 

Near  West  Yellowstone,  Montana,  June  29,  1973.  Washington,  D.C.,  Statements  of  Pilot  and  Other 
Crew  Members,  6 July,  1973. 
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247.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  United  Air  Lines,  Inc.,  Boeing 

737,  N903IU,  Chicago  Midway  Airport,  Chi cago , Till noi s , December  8,  1 972 . Washington,  D.C., 

Report  ho.“ftTSB-AAR-73-16, 29  August,  T973T 

248.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Eastern  Air  Lines,  Inc.,  Boeing 

727-225,  N8843E,  Toledo,  Ohio,  April  ToV  1973.  Washington,  D . C . , Report  No~NTSB-AAR-73-l 7 , 

27  September,  1973. 

249.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Frontier  Airlines,  Inc.,  Boeing 

737-200,  N737QF,  St.  Louis,  Mi  ssouri , July  24 , *1973.  Was  hi  09  ton",  D7c  ./Report  No.  DEN-74-A-  D004 , 
29  September,  V97 3. 

250.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Air  Iowa,  Inc.,  Beech  E18S,  N310WA 

Davenport,  Iowa,  April  19,  1973.  Washington,  D.C.,  Report  No.  NTSB-AAR-73-r8,  3 October,  ' 1 973. 

251.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  National  Airlines,  Douglas 

DC-10-10,  N67NA,  Enroute  New  Orleans , Louisiana  to  Miami\  Florida, ^AugusT  10,  1973. 

Washington,  D.C. , Report  No.  MlA-74-A-Mol3,  24  October,  1973. 

252.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Continental  Airlines,  Saberliner 

Model  NA-265-60,  N743R,  Montrose,  ColoradoV ~AprTl~V3,  1 973~  Washington,  D.C.,  Report  No.  NTSB- 
AAR-73-19,  / November,  1973. 

253.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Lofteidir  Icelandic  Airlines, 

Inc.,  Douglas  DC-8-61,  John  F.  Kennedy  International  Airport,  Jarnai c^T"New  York,June  23,  1973. 
Washington,  D.C.,  Report  No.  NTSB-AAR-73-20,  5 December,  1973. 

254.  National  Transportation  Safety  Board.  Aircraft  Accident  Reports.  Brief  Format,  U.S.  Civilian 

Aviation.  Issues  Number  1-4  of  1974  Acc i dents ~ Washington,  D.C.,  Report  Nos.  NTSB-BA-74-4,  6, 

77  an"cT7 5-1 TT9747 

255.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  National  Airlines,  Inc., 

DC-1Q-10,  N60NA,  Near  Albuquerque,  New  Mexico,  November  3,  1 973.  Was  hi ng  to  n , D . C . , Re  po  r t No. 
NTSB-AAR-75-2,  T5  January,  1975. 

256.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  Delta  Airlines,  Douglas 

DC-9-32,  N3338L,  Near  Lebanon,  New  Hampshire,  December  21,  1973.  Washington,  D.C.,  Report  No. 
NYC-74-A-N060,  18  January,  1974. 

257.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Overseas  National  Airways,  Inc., 

McDonnell  Douglas  DC-8-63,  N863F,  Bangor,  Maine,  June  20,  1973.  Washington,  D.C.,  Report  No. 
NTSB-AAR-74"-l,  T February j 1974. 

258.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Eastern  Air  Lines,  Inc.,  Douglas 

DC-9-31 , N8962E,  Near  Meridian,  Mississippi.  Washington,  D.C. , 15  February,  1974. 

259.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Skyways  International,  Inc.  , 

Douglas  DC-7C,  N296,  Near  the  Miami  International  Airport,  Dade  County,  Florida,  June  21 , 1973. 
Washington,  D.C.,  Report  No.NTSB-AAR-74-2,  27  February,  1974. 

260.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Delta  Air  Lines,  Inc.,  Douglas 

DC-9-31,  N975NE,  Boston,  Massachusetts^,  July  31 , T9 73”  Washing torT,  D.C. , Report  No.  NTSB-AAR- 
7T-3,  7 March,  T974'; 

261.  National  Transportation  Safety  Board.  Annual  Reviews  of  Aircraft  Accident  Data.  U.S.  Air  Carrier 

Operations  1970-1972.  Washington,  D.C.,  Report  No.  NTSB-ARC-74-1 , 11  April , 1 974 . 

262.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Texas  International,  Inc., 

Convair  600,  N94230,  Mena,  Arkansas,  September  27,  1973.  Washington,  D.C.,  Report  No.  NTSB-AAR- 
74^4  ,”11"  A p ri  1 ",H  974T. 

263.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Ozark  Air  Lines,  Inc.,  Fairchild 

Hiller  FH-227B,  N4215,  Near  the  Lambert-St.  Louis  International  Airport,  St.  Louis,  Missouri, 

July  23,  1973.  Washington,  D.C.,  Report  No.  NTsB-AAR-74-5,  24  April,  1974. 

264.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  American  Airlines,  Boeing 

727-023,  N2914,  Detroit  Metropolitan  Airport,  Detroit,  Michigan.  December  22,  1973. 

Washington,  D.C.,  Report  No. CH I -74-A-C006 , 25  April,  1974. 

265.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  World  Airways,  Inc.,  DC-8-63F, 

N802WA,  King  Cove,  Alaska,  September  87  1973.  Washington , D.C .,  Report  No.  NTSB-AAR^74^67 

5H ay7^-57r 

266.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Piedmont  Airlines,  Boeing  737, 

N751N,  Greensboro,  N.C.,  October  28,  1 973.  Washington,  D.C.,  Report  No.  NTSB-AAR-74-7 , 

2^  May  ,“1974“ 

267.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  Eastern  Air  Lines,  Inc., 

Lockheed  L-101 1 , N321EA,  Near  Ft.  Lauderdale,  m or i da,  March  21  ,^1974.  Washington,  D.C.,  Report 
No.  MIA-74-A-M083,  7 June,  1974. 
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National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Trans  World  Airlines,  Inc., 
Boeing  707-331 B , N87Q5T,  Los  Angeles,  California,  August  28,  1973.  Washington,  D.C.,  Report  No. 
NTSB-AAR-74-8,  10  July,  1974. 
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269.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  National  Airlines,  Inc.,  McDonnell 

Douglas  DC-10-10,  N60NA,  Near  Tampa,  Florida,  July  8,  1974.  Washington,  D.C.,  Report  No.  NTSB-AAR- 

74- 9,  24  July,  1974. 

270.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Trans  World  Airlines,  Inc.,  Boeing 

707- 1 31 B , N757TW,  Los  Angeles  Internationa lAirport,  Los  Angeles,  California,  January  16,  1974. 
Washington,  D.C. , Report  No.  NTSB-AAR-74-1 0,  14  August,  1974. 

271.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Aircraft  Pool  Leasing  Corporation, 

Lockheed  Super  Constellation,  L-1Q49H,  N6917C,  Miami , Florida,  December  15,  1973.  Washington,  D.C. 
Report  No.  NTSB-AAR-74-1 1 , 11  September,  1974. 

272.  National  Transportation  Safety  Board.  Annual  Reviews  of  Aircraft  Accident  Data,  U.S.  Air  Carrier 

Operations,  1973.  Washington,  D.C.,  Report  No.  NTSB-ARC-74-2,  24  October,  1974. 

273.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Eastern  Air  Lines,  Inc., 

McDonnell  Douglas  DC-9-31,  N8967E,  Akron-Canton  Regional  Airport,  North  Canton,  Ohio, 

November  27,  1973~  Washington,  D.C.,  Report  No.  N T S B -AAR - 7 4 - 1 2 , 5 November,^ 974/ 

274.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Delta  Air  Lines,  Inc.,  McDonnell 

Douglas  DC-9-32,  N3323L,  Chattanooga  Municipal  Airport,  Chattanooga,  Tennessee,  November  27,  1973. 
Washington,  D.C.,  Report No. ”NTSB-AAR-74-13,  8 November,  1974. 

275.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Iberian  Airlines,  McDonnell 

Douglas  DC-10-30,  EC  CBN,  Logan  International  Airport,  Boston,  Massachusetts,  December  17,  1973. 
Washington,  D.C.,  Report  No.  NTSB-AAR-74-14,  8 November,  1974.  

276.  National  Transportation  Safety  Board.  Aircraft  Accident  Report.  Pan  American  World  Airways,  Inc., 

Boeing  707-321B,  N454PA,  Pago  Pago,  American  Samoa,  January  30,  1974.  Washington,  D.C.,  Report 
NoV  NTSB-AAR-74-1 5,  8 November,  1974. 

277.  National  Transportation  Safety  Board.  Factual  Report  of  Investigation.  Pan  American  World  Airways, 

Boeing  727/200,  N6818,  O' Hare  International  Airport,  "Chicago",  IlJTnois, “July  10,  1974] 

Washington,  D.C.,  Report  No.  CHI-75-A-C003,  13  November,  1974. 
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remained  intact.  Cabin  evacuated  in  orderly 
manner.  Small  post  crash  fire  outside  of 
fuselage  caused  no  injury. 
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of  runway  while  on  ILS  approach.  Crash  not 
survivable.  Controllers  did  not  know  of 
crash  and  had  cleared  2 other  aircraft  to 
land  after  the  accident.  Both  went  around 


Injuries  Fatalities 

Injury  Total  Flight  Flight 

1973  Type  Model  Airline  Location  Index  Occup  Deck  Crew  Pass  Deck  Crew  Pass  Remarks 
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fatalities  not  given. 
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passengers  thrown  to  forward  part  of  cabin. 
No  post  crash  fire.  Cabin  emergency  light- 
ing did  not  function.  Only  1 passenger  was 
able  to  evacuate  aircraft  before  rescue 
crews  came.  Both  pilots  might  have  sur- 
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Inj uries  Fatalities 

Injury  Total  Flight  Flight 

1971  Type  Model  Airline  Location  Index  Qccup  Deck  Crew  Pass  Deck  Crew  Pass 
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Injuries  Fatalities 

Injury  Total  Flight  Flight 

1971  Type  Model  Airline  Locat  ion  Index  Occup  Deck  Crew  Pass  Deck  Crev  Pass 
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07  25  Boeing  707  Pan  Am  Manila,  Philippines  Fatal  4 0 0 0 A 0 0 Aircraft  crashed  on  approach.  Investigation 

under  jurisdiction  of  Philippine  government 

07  23  Boeing  747  United  Chicago,  111.  Serious  199  0 01  0 00  Engine  fire  on  ground.  Passenger  injured 


07  19  Boeing  727  United  Denver,  Colo.  Minor  101  0 0 0 0 0 0 Gear  collapsed  during  ground  loop. 
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1970  Type  Model  Airline  Location  Index  Occup  Deck  Crew  Pass  Deck  Crew  Pass  Remarks 
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08  10  Boeing  737  United  Nr.  Herndon,  Va.  Serious  48  0 0 1 0 0 0 Passenger  fell  while  returning  to  seat. 
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hold of  runway.  Crash  not  survivable,  air- 
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04  25  Boeing  707  TWA  San  Francisco  None  3 0 0 0 0 0 0 Gear  collapsed  on  landing  roll.  Previous 

hard  landing  prior  to  crew  change.  No 
report  made. 


04  17  Lockheed  1049H  Alaska  Kotzebue,  Alaska  None  32  0 0 0 0 0 0 Gear  up  landing  during  whiteout  conditions. 
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after  impact*  Damage  substantial. 

07  21  Lockheed  L-188  Braniff  Fort  Worth,  Tex.  None  38  0 0 0 0 0 0 Aircraft  made  gear  up  landing. 

07  11  Convair  600  Trans  Texas  Harlingen,  Tex.  None  21  0 0 0 0 0 0 Gear  collapsed  on  touchdown. 

07  09  Martin  404  Piedmont  Roanoke,  Va.  Serious  42  0 0 1 0 0 0 Gear  collapsed  while  aircraft  parked 

on  ramp . 


06  29  Boeing  720  American  Mojave,  Cal.  Minor  6000000  Aircraft  undershot  landing  during  simu- 

lated 4-engine  flameout  approach.  Sub- 
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11  15  DeHavilland  DHC-2  Wien  Artie  Village,  None  1 0 0 0 0 0 0 Aircraft  damaged  substantially  in  hard 

Alaska  Alaska  landing. 


11  11  Boeing  727  United  Salt  Lake  City,  Fatal  91  3 3 29  0 0 43  Aircraft  undershot  runway  on  landing. 
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10  09  Douglas  DC-8  United  Nr.  Los  Angeles,  Serious  45  0 0 1 0 0 0 Passenger  injured  in  evasi1 

Cal.  avoid  collision  with  PA-23 


10  01  Pilatas  PC6  Wien  Alaska  Selawik,  Alaska  None  6 0 0 0 0 0 0 Ground  looped  on  landing.  Gear  collapsed 

09  22  Douglas  DC-6  United  Nr.  Des  Moines,  Serious  74  1 0 0 0 0 0 Bird  strike. 
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Letters  in  parentheses  designate  country  of  registry 
according  to  World  Airline  Accident  Summary,  Civil 
Aviation  Authority,  U.K. 

Note:  In  none  of  above  cases  are  data  avilable  at  this  time 
concerning  occupant  injuries  or  emergency  egress. 
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05  27  Caravelle  Sterling  Gothenburg,  Sweden  None  135  0 00  0 00  Hard  landing.  Substantial  damage. 
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01  24  Boeing  707  THY  (TC)  Ankara,  Turkey  None  ? 0 0 0 0 0 0 Nose  gear  collapsed  on  hard  landing. 


01  22  Boeing  720B  P1A  (AP)  Ankara,  Turkey  None  44  0 0 0 0 0 0 Aircraft  right  of  runway  during  final. 
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deck.  Successful  emergency  landing  made. 

08  11  Lockheed  382B  (CF)  Eureka  Airstrip  None  4 0 0 0 0 0 0 Overran  runway  on  landing. 
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emergency  landing  made  on  foamed  runw. 

03  31  Boeing  707  BOAC  (G)  London  Arpt.  None  5 0 0 0 0 0 0 Nose  gear  failed  to  extend  on  landing 

03  08  Carvair  Compagnie  Air  Trans,  Nr.  Karachi,  Fatal  6 2040  Aircraft  crashed  on  takeoff  killing  4 

(F)  Pakistan  crewmembers  and  7 people  on  ground. 
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Injury  Total  Flight  Flight 

1967  Type  Model  Airline  Location  Index  Occup  Deck  Crev  Pass  Deck  Crev  Pass 
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12  20  Britannia  Lloyd  Int.  (G)  Stuns  ted  None  4 0 0 0 0 0 0 Nose  gear  collapsed  on  touch  and  go. 
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04  26  Convair  440  Lufthansa  (D)  Copenhagen,  Den.  None  34  0 0 0 0 0 0 Convair  collided  with  taxiing  Heron  during 

04  26  DeHavilland  Heron  Falck’s  Copenhagen,  Den.  None  12  0 0 0 0 0 0 takeoff  run.  Continued  takeoff  and  made 

Flight  Service  (0Y)  safe  landing. 


Injuries  Fatalities 

Injury  Total  Flight  Flight 

1966  Type  Model  Airline  Location  Index  Occup  Deck  Crew  Pass  Deck.  Crew  Pass  Remarks 
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05  06  Fokker  F— 27  Braathens  SAFE  (LN)  Sola  Arpt.  None  ? 0 0 0 0 0 0 Landed  with  nose  gear  retracted. 


12  30  Fokker  F-27  Braathens  SAFE  (LN)  Fornebu  Arpt.,  None  38  0 0 0 0 0 0 Aircraft  veered  off  of  runway  on  landing. 
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08  29  IL-18  TABSO  (LZ)  Vienna  Arpt  • None  97  0 0 0 0 0 0 Overran  runway  on  landing. 

07  30  Bristol  170  Air  Fret  (F)  Southend  Arpt.  None  3 0 0 0 0 0 0 Gear  collapsed  on  landing. 


275 


T3 

Mi 

03 

X 

X 

B 

X 

0) 

c 

<1) 

X 

X 

1 

o 

1 

3 

X 

o 

X 

4-1 

> 

4-1 

1 

60 

<D 

<D 

G 

05 

X 

X 

3 

co 

1 

X 

1 

PM 

O 

<4-1 

iH 

<D 

c 

X 

X 

X 

O 

a) 

U 

J6 

to 

60 

o 

J3 

60 

E 

P. 

P. 

0) 

Mi 

X 

. 

X 

3 

u 

X 

* 

S 

. 

0) 

c 

CJ 

3 

G 

<u 

3 

X 

. 

Mi 

X 

03 

X 

03 

to 

CM 

60 

W 

0) 

CO 

X 

X 

X 

CO 

X 

4-1 

4-1 

4-1 

to 

3 

X 

X 

u 

X 

3 

CM 

G 

CM 

0) 

03 

X 

. 

X 

4-1 

<U 

to 

0) 

Mi 

Mi 

X 

03 

X 

G 

o 

0) 

X 

* 

0} 

B 

0) 

X 

3 

60 

. 

G 

03 

o 

X 

o 

O 

X 

G 

3 

• 

X 

X 

03 

a 

o3 

X 

IX 

X 

G 

to 

0} 

o 

1— 1 

4-1 

P. 

J= 

60 

03 

Cm 

G 

X 

60 

G 

0) 

to 

X 

u 

03 

X 

<D 

X 

G 

Mi 

Mi 

4-1 

G 

60 

X 

O 

<U 

G 

03 

X 

w 

x 

X 

X 

X 

X 

X 

PQ 

4-1 

o 

X 

o 

X 

c 

to 

• 

X 

to 

X 

X 

03 

CM 

U 

03 

G 

X 

60 

X 

4J 

03 

X 

X 

J3 

X 

CO 

X 

• 

G 

E 

X 

a) 

0} 

3 

C 

iH 

0J 

. * 

G 

X 

3 

X 

to 

o 

3 

G 

60 

X 

X 

3 

X 

60 

X 

•x 

X 

o 

4-1 

M« 

60 

X 

X 

03 

3 

CO 

60 

0) 

55 

X 

O 

G 

3 

i-i 

< 

B 

G 

X 

X 

J= 

u 

G 

0 

0) 

X 

X 

X 

X 

. 

X 

o 

X 

G 

X 

3 

4J 

60 

Mi 

3 

Mi 

. 

X 

CM 

. 

X 

to 

X 

> 

0) 

O 

• 

0 

o 

X 

c 

X 

X 

3 

X) 

3 

X 

X 

60 

X 

B 

60 

X 

3 

a) 

X 

X 

X 

CO 

X 

o 

o 

r— ( 

03 

to 

X 

i-j 

Mi 

<d 

G 

G 

o 

G 

o 

X 

to 

X 

0) 

X 

<d 

ix 

2 

to 

u 

<4-1 

<D 

G 

03 

to 

X 

X 

o 

X 

<U 

> 

CM 

J= 

X 

0) 

0) 

X 

03 

X 

A) 

X 

. 

X 

X 

to 

X 

p. 

X 

0) 

X 

3 

td 

60 

X 

B 

X 

a: 

X 

> 

. 

<D 

Mi 

X 

60 

O 

to 

X 

<D 

03 

G 

X 

X 

G 

03 

to 

X 

X 

X 

J6 

G 

<15 

G 

<D 

X 

03 

o 

G 

03 

0) 

G 

X 

G 

X 

03 

to 

<D 

to 

03 

4J 

<D 

X 

X 

03 

X 

03 

0} 

X 

3 

CJ 

3 

B 

X 

o 

G 

X 

r— 1 

M« 

O 

X 

X 

<D 

X 

X 

0) 

X 

> 

o 

a 

o 

03 

X 

G 

X 

<d 

4-1 

G 

Mi 

X 

to 

3 

o 

X 

03 

X 

X 

G 

a 

G 

o 

CO 

X 

X 

<D 

03 

3 

X 

P. 

60 

G 

3 

•x 

X 

u 

G 

X 

X 

CM 

X 

G 

O 

• 

X 

G 

X 

X 

<u 

03 

G 

X 

s 

o 

03 

P. 

G 

o 

o 

G 

0) 

X 

o 

3 

0) 

03 

3 

o 

X 

X 

O 

G 

G 

CM 

03 

0) 

3 

Mi 

03 

0) 

X 

X 

60 

X 

X 

•x 

P. 

X 

*x 

X 

S 

03 

X 

X 

G 

03 

X 

0) 

X 

X 

60 

X 

4-1 

4-1 

X 

Mi 

S3 

60 

03 

X 

G 

<1) 

G 

X 

0) 

<D 

3 

X 

X 

CM 

03 

to 

• 

X 

to 

03 

CM, 

c 

iH 

4-1 

G 

0) 

Mi 

0 

X 

0) 

<1) 

X 

CO 

X 

X 

<D 

to 

o 

60 

o 

03 

03 

3 

X 

X 

0) 

03 

B 

0) 

60 

03 

X 

3 

CO 

O 

0} 

X 

60 

(X 

<1) 

CM 

CM 

X 

3 

B 

a 

CM 

to 

X 

> 

X 

03 

X 

C 

G 

0) 

o 

G 

X 

X 

O 

o 

CM 

CO 

o 

O 

03 

G 

. 

G 

0) 

O 

u 

CO 

X 

o 

o 

►P 

X 

CD 

X 

X 

1— 1 

Mi 

Mi 

X 

G 

O 

2 

O 

3 

55 

O 

X 

X 

co 

X 

03 

o 

o 

CD 

X 

to 

4-1 

Mi 

X 

60 

0) 

B 

4-1 

60 

X 

X 

X 

03 

X 

X 

<D 

S3 

o 

> 

X 

X 

(1) 

X 

J5 

X 

X 

<4-1 

3 

• 

X 

60 

X 

C 

03 

. 

CM 

CJ 

• 

• 

o 

X 

X 

g 

X 

0) 

X 

a) 

• 

X 

60 

ix 

X 

03 

03 

o3 

X) 

Mi 

60 

4-1 

a: 

G 

X 

03 

X 

B 

X 

0) 

X 

co 

u 

0) 

CM 

►P 

X 

0 

X 

X 

> 

C 

03 

X 

X 

X ■ 

Mi 

X 

G 

0 

o 

0) 

0) 

Mi 

G 

G 

60 

CM 

G 

X 

G 

0) 

,G 

03 

X 

Jn 

a) 

a> 

0) 

X 

X 

S 

X 

CJ 

>H 

03 

X 

,n 

3 

CO 

> 

o 

X 

X 

3 

<d 

X 

0) 

3 

X 

X 

to 

55 

X 

0) 

o 

X 

X 

IX 

<D 

X 

u 

G 

X 

Mi 

X 

X) 

Mi 

Mi 

(0 

X 

Mi 

03 

X 

O 

g 

• 

J6 

X 

o 

X 

03 

03 

60 

X 

G 

X 

co 

X 

o 

to 

G 

X 

X 

03 

03 

X 

o 

X 

3 

G 

4-1 

03 

0) 

X 

Mi 

0) 

X 

03 

O 

03 

0) 

X 

3 

<D 

X 

X 

X 

X 

<15 

X 

0) 

3 

X 

O 

03 

X 

CD 

X 

ID 

c 

Mi 

B 

a 

O 

CO 

P. 

u 

< 

X 

X 

o 

X 

55 

U 

to 

cj 

*x 

CJ 

CJ 

03 

X 

Pm 

60 

lx 

X 

to 

X 

55 

X 

< 

X 

to 

CJ 

to 

CO 

O 

o 

o 

o 

o 

O 

o 

O 

O 

O 

O 

o 

O 

<1) 
X 

. . o 

03 
x 
03 

Pm  x ,u 
60  U 
*H  (1) 
•H  Q 
pM 


O O O O 


o o co  o 


o o o o 


o o o o 


o o o o 


o o o o 


o o o o 


o o o o 


cx 

4-1  3 

o u 
H u 
o 


vO  CM  CO  CO 
CM  vO 


sj-  iO  00 

vp 


>v 

X X 
3 <D 

i-j  *t3 

G G 


0} 

Pm 


u 

<D 

CO 


0) 

G 

o 

2 


0)  0) 
G G 
o o 
23  25 


(U 

G 

O 

25 


O 0)  03  O 

G G x G 

X OH)  *H 
S 2i  PM  s 


0)  Q) 

G G 

O O 

25  2 


<d 

G 

o 

25 


O • 
.C  X 
O <D 
to  CJ 
X 

0)  - 
X rC 

0)  u 
Cm  03 
jo 
• to 
x c 
25  < 


G 

o 


o 

H 


CO 

4 


< 

CM 

• 

X 

CO 

X 

CM  I 

<D 

CM 

Mi  03 

X 

CM 

* 

U 

< | 

G 

CM 

O 

03 

< 

<D 

0) 

X 

« 

G 

X 3 to 

X 

60 

< 

O 

o 

ID  CO  3 

o 

0) 

G 

X 

60 

X X 

CM 

J= 

03 

O 

<D 

G 

CO  <D  > 

03 

G 

> 

to  • 

CJ 

O 

G X 3 

60 

(D 

<D 

X CJ 

X 

CO 

03  G CO 

G 

CM 

G 

3 • 

03 

q 

x o a) 

X 

O 

ID 

X PQ 

PQ 

co  s > 

co 

CJ 

CJ 

CJ 

X 

CJ 

G 

o 

s 


T3 

O 

si 


/--N 

G 

03 

to 

Pt, 

03 

X 

X 

CJ 

X 

O' 

X 

03 

X 

ai 

03 

? 

X 

CJ 

X 

N-X 

X 

X 

< 

CM 

B 

X 

X 

X 

CJ 

v-/ 

03 

03 

X » X 

< 

H 

CJ 

CJ 

G 

o < 

/-% 

V— ' 

Q 

s 

< 

<D 

>*_✓ 

G 

>1 

X 

Q Pm 

X 

JQ 

X 

0) 

o 

X 

Pm 

G 

S 

W CJ 

G 

03 

X G 

X 

w 

CJ 

X 

3 

3 

CO 

X 3 

to 

Pm 

NX 

X 

O 

CJ 

CM 

O 

03  O 

Jn 

CO 

Q 

CJ 

oo 

X MD 

CJ 

co 

X U 

03 

< 

r*. 

<r 

to 

oo 

co  <r 

to 

1 

3 to 

X 

CO 

1 

l 

O 

•H 

X 

1 

X 

CJ 

< X 

CJ 

tJ 

CM 

> 

03  CJ 

> 

a 

> 

S 

(D 

Q 

G 

r-. 

X 

X 

X 

X 

to 

(D 

G to 

to 

to 

to 

*<r 

X 

to 

to 

60 

X 

(D 

G to 

X 

03 

60  X 

ID 

cd 

cd 

C 

ID 

rC 

03  X 

ID 

X 

C ID 

X 

> 

X 

X 

X 

J*i 

A) 

X X 

j*: 

60 

X 

<D 

03 

60 

60 

ID 

CJ 

CJ 

X X 

u 

3 

^ a 

B 

X 

3 

3 

O 

X 

o 

X 3 

X 

O 

X X 

o 

cd 

O 

O 

PQ 

> 

X 

PQ  CJ 

> 

a 

> > 

CJ 

CJ 

Q 

Q 

m 

m 

CM 

\p  in 

co 

oo 

vO  oo 

CM 

n. 

X 

O 

X 

X 

O 

CM  CM 

CM 

X 

O CM 

CM 

X 

X 

X 

vD 

vD 

m m 

in 

sr 

«<r  co 

co 

co 

co 

CO 

O 

O 

O 

o o 

o 

o 

o o 

o 

o 

o 

o 

practice.  Substantial  damage. 

03  09  Comet  A B0AC  (G)  Tehran,  Iran  None  57  0 0 0 0 0 0 Touched  down  tail  first.  Substantial  damage. 

02  29  Britannia  312  British  Eagle  Int.Nr.  Innsbruck,  Fatal  83  0 00  3 5 75  Aircraft  crashed  into  mountainous  terrain 

(G)  Austria  during  descent.  Destroyed  by  impact. 


02  03  Douglas  DC-3  Turkish  Airlines  Nr.  Ankara,  Turkey  Fatal  3000300  Aircraft  crashed  during  instrument  approach, 


276 


1 

>> 

1 

• 

3 

co 

4-1 

CO 

4-1 

> 

3 

3 

3 

3 

<0 

cO 

O 

O 

o 

O 

3 

a,  *h 

a 

4-1 

'O 

•H 

3 

3 

3 

3 

a> 

X 

*H 

d) 

*H 

O X 

cO 

CO 

cO 

tx 

e 

• 

u 

*H 

4-1 

M-l 

CO 

3 

*H 

rH 

3 

CW 

4-1 

CO 

• 

cO 

U 

O 

O 

o 

0) 

60 

6 

CX 

I— 1 

3 

3 

• 

3 

60  *H 

*H 

o 

*3 

•H 

3 Oh 

*3 

*3 

3 

3 

cO 

*H 

r-t 

3 

M-l 

3 

*3 

• 

0) 

CO 

o 

4-1 

3 

*3 

•H 

i— 1 

CO 

3 

cO 

cO 

0) 

cw 

a) 

60 

»— 1 

rH 

3 

*~t 

60 

*H 

3 

o 

• 

'O 

3 

•3 

CO 

*H 

4-* 

a 

0) 

•H 

0) 

cw 

*3 

u 

4-1 

'O 

o 

*3 

0) 

CO 

O 

3 

3 

CO 

0) 

CO 

(X 

cO 

cO 

O 

0) 

rG 

cx 

E X 

4-1 

H 

CW 

3 

CO 

CO 

*H 

O 

3 

•H 

cO 

H 1 

to 

O 

a) 

0) 

60 

3 

i— 1 

>> 

o 

U 

*3 

3 

O • 

o 

3 

co 

0) 

* 

CO 

u 

a 

3 

CO 

a 

•3 

0)  0) 

'O 

a 

cO 

X 

0) 

3 *H 

3 

0) 

cO 

a) 

0) 

4-1 

4-1 

3 

CO  3 

cO 

>> 

60  'O 

• 

cw 

o 

3 «- 1 3 

0) 

o 

60 

CO 

a) 

CO 

.3 

T? 

CX 

60 

u 

3 

4-1 

B 

&o 

3 

3 

3 

4-1 

*H 

M-l 

rt 

U 

3 *H 

rH  *H 

0) 

co 

3 

co 

•3 

0 

3 

0) 

CO 

0> 

3 

3 

3 

CQ 

•H  J3 

CO  O 

O 

o 

Q 

O 

tO 

C 

H 1 

X X 

o 

O 

o 

O 

o 

O 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

CN 

o 

o 

os 

<N 

cn 

m 

vO 

CO 

3 

O 

a) 

•H 

0) 

0) 

3 

3 

3 

3 

O 

0) 

o 

O 

w 

55 

35 

• 

4-1 

• 

3 

3. 

4J 

Pi 

3 

CX 

< 

3 

4-1 

O 

3 

CO 

.3 

a) 

3 

*3 

*H 

a 

o 

a) 

cO 

3 U 

>> 

4-1 

55 

P3  a) 

l-J 

co  X 

,3 

3 o) 

. 0) 

CO  CO 

3 

3 

4J  CO 

55 

55 

CO  W 

/—V 

Pm 

U 

H 

W 

3 

•rl 

CO 

4-1 

3 

(0 

✓-N 

60 

o 

3 

o 

3 

C 

V/ 

•H 

X 

o 

cn 

-<r 

< 

1 

l 

3 

o 

CJ 

u 

0) 

3) 

O 

o 

C 

sf 

to 

CO 

3 

C0 

C0 

4J 

rH 

r-t 

CO 

QJ 

60 

60 

> 

a 

3 

3 

3 

o 

O 

O 

CO 

o 

Q 

Q 

CJ 

CN 

CP^ 

OS 

CO 

o 

o 

O 

o 

CN 

r-t 

»—l 

rH 

O 

o 

o 

o 

1975  PRELIMINARY  AIR  CARRIER  ACCIDENTS 
UNITED  STATES  (INCOMPLETE)* 


277 


Cm 

CO 

i 

1 

m x: 

-d- 

G 

cd 

G 

O 

CO 

CD 

rH 

o 

-P 

G 

G 

LT\  4-> 

L 

rH  G 

•H 

-P 

rH 

1— 1 

X 

t— 1 

cd 

CO 

Tf 

•H 

*rt 

X 

ON  *H 

pi 

rH  *H 

1 

X 

•H 

G 

O 

cd 

o 

Cm 

0 

> 

X 

G 

CD 

cd 

to 

•* 

> 

ft 

X! 

G 

cd 

ft 

»—l 

tJ 

<— 1 

X 

cd 

| 

o 

CD 

G 

to 

G 

a 

-d 

G 

-p 

-=r 

42  X> 

O 

o 

CO 

O 

0) 

•H 

t i 

U 

0 

cd 

CD 

o 

G 

on 

C 

-p 

-H 

O 

o 

c 

o 

ft 

cd 

• 

Td 

CO 

X 

TJ 

rH 

-p 

G 

G 

O 

O 

cd 

•H  > 

o 

o 

X 

0 

G 

• 

CO 

CD 

CO 

G 

C 

G 

X 

G 

ft  ^3 

•H 

X! 

X 

a 

■H 

rH 

>» 

33 

0 

O 

0 

X 

X 

cd 

3 

CD 

•H 

a} 

0 

to  a 

-P 

-P 

0 

CO 

to 

<D  -d- 

cd 

rH 

ft  VO 

X 

o 

G 

tO 

> 

G 

•H 

•H 

G 

•H 

G 

g a 

CVJ 

to 

CO 

a 

H 

*> 

CD 

d 

G 

G 

X} 

G 

*d 

-d 

<M 

rH 

*H 

o 3 

c 

o 

G 

o 

G 

pi 

o 

cd 

Cm 

•* 

G 

CD 

CD 

•H 

i? 

G 

CD 

rH 

CO 

*H  O 

•H 

-p 

0 

G 

O 

ft 

-p 

CD 

Cm 

Cm 

G 

CO 

tO 

cd 

CD 

cd 

G 

-p 

o 

•H 

• 

T> 

•H 

«H 

•H 

CO 

a 

Cm 

0 

CO 

G 

G 

»G 

cd 

•H 

G 

o 

G 

O -P 

G 

G 

G 

G 

CO 

0 

G 

G 

O 

G 

cd 

G 

P> 

Eh 

S H 

X 

<D 

G 

CD  ft 

(D 

rH 

(D 

CD 

CO 

tJ 

CO 

X 

CD 

cd 

G 

<D 

tO  ft 

0 

>* 

ft 

cd 

ft 

CD 

» o 

xf 

O 

G od 

X 

a 

CO 

M 

G 

<d 

G 

0) 

M 

r- ( 

> 

aj 

> 

CD 

CO 

•H 

•H  G 

-P 

G 

cd 

G 

cd 

G 

X 

cd 

X 

cd 

t* 

cd 

G 

• 

G 

tJ 

G G 

CD 

o 

rH 

*d  o 

0 

•H 

-P 

CD 

cd 

»— 1 

ft 

G 

X 

«M 

X 

-P 

CD 

• 

CD 

CD 

o 

-G 

3 

CD  CD 

TJ 

> 

rH 

G 

G 

B 

H 

CD 

0 

0 

G 

G 

H 

X 

G 

CD 

G 

CO 

Xf 

cd 

O 

CD  -H 

X 

*> 

CD 

(D 

<D 

cd 

o 

O 

CO 

G 

CD 

cd 

•H 

•rH 

C 

-P 

G *H 

rH 

cd 

o 

o 

G 

> 

ft 

o 

o 

CO 

G 

X 

T> 

O 

> 

CD 

rP 

G 

cd 

cd 

<M 

G 

CD  O 

o 

o 

•H 

cd 

rH 

CD 

CD 

OJ 

CD 

G 

G 

Cm 

0 

to 

O 

•H 

> 

<M 

cd 

co  G 

c 

-p 

X) 

CO  CD 

CD 

1 

> 

CO 

to  *d 

TJ 

tO 

<D 

cd 

tO 

o 

1 

a 

*> 

G 

O 

ft 

CO  H 

Q) 

CD 

0 X! 

o 

G 

G 

C 

a 

1 

CD 

to  Td 

CD 

G 

fid  — ■ 

' to 

— 

CD 

ft 

ft 

Q 

CO 

CD 

•H 

>* 

CD 

x 

« 

G 

CO 

aj 

G 

G 

X 

-P 

O 

ft 

G 

o 

ft 

0 

X 

to 

XI 

o 

o 

CO 

cd 

CO 

•H 

0 

0 

•H 

•H 

•H 

-P 

G 

o 

CD 

o 

S 

O 

ft 

G 

C 

• 

o 

OJ 

G 

CO 

OJ 

<D 

•H 

G 

G 

> 

• 

r) 

> 

cd 

(D 

o 

xf  « 

a 

o 

O 

• 

— 

0 

cd 

CD 

^d 

cd 

on 

CD 

cd 

G 

X 

X 

CO 

G 

CD 

> 

G > 

» CD 

** 

0 

G TJ 

o 

T* 

CO 

CD 

0 

Pi 

tO 

ft  X 

o 

cd 

tJ 

T} 

G 

cd 

CO 

> 

cd  G 

on 

PI 

*H  G 

o 

co 

G 

CO 

G 

G 

ft 

G 

cd 

X 

0 

(U 

CD 

G 

i— 1 

CO 

G 

• 

> G 

CD 

on 

cd 

H 

-p 

CD 

cd 

G 

ft 

OJ 

CO 

G 

G 

X 

CO 

■p 

*r"5 

o 

Xi 

cd 

-d 

G *,-5  'd 

< 

O 0 

1 

c 

X 

ft  **-3 

ft  X 

a 

CO 

0 

3 

G 

G 

ft 

cd 

c 

G 

G 

G 

CD 

G 

0 G 

o 

LT\  X 

o 

G 

X 

G 

c 

cd 

<d 

1— ( 

«M 

CD 

H 

0 

cd 

G 

•H 

O 

o 

cd 

to 

a 

<P  *H 

-p 

(h 

on  cd 

OJ 

ft 

cd 

on  *h 

x 

x m 
tO  o 
•H  CD 
H Q 
ft 


X M 
tO  CJ 
•H  CD 
rH  Q 

ft 


O CJ 
E-<  O 


G X 

3 a; 

5 T> 

« G 


5 


cd  H 
C a} 

o o 

•H 

X ** 
a}  'd 
G G 
G cd 
<D  H 
X ^ 
G cd 
M O 


H CO 
O ^ 
X cd 
•H  > 
ft  G 
cd  *h 
u < 


*d 

CD 

c 

G 

<d 

* 


CO  o 

I s 

X 

G ** 

a;  co 

X *H 

I! 


X 

; o 


O S 

on 


4* 

g 

cd 


tj 

• CD 
CD  X 
to  (0 
C H 
CD  cd  rH 
•H  42 

cd  ft  o 
X *H 

-P  r— I O 
aj  X 
Cm  G 
0 O4  X 


X 

cd 


co  a;  cd 
X X **-a 


X -n 
O P G X 
ft  CO  CO  ‘H 

a>  G co 
K a - o 
c ft 
0)  G O 
6 g -h  -p 


G 

>»  o 

X X ft 


278 


i 

P 

1 

1 

0 

Td 

0 

1 

• 

aj 

aj 

0 

1 

X 

d 

0 

to 

X 

d 

1 

i 

0 

O 

d 

p 

d 

1 

Td 

d 

to 

•H 

to 

O 

o 

•H 

d 

aj 

d 

CJ 

X 

n 

0 

a} 

0 

0 

aJ 

V 

O 

d 

d 

aj 

d 

ft 

*rH 

Td 

aj 

to 

0 

> 

d 

0 

> 

> 

1 

0 

d 

rH 

d 

d 

0) 

¥ 

C 

> 

•H 

d 

0 

o 

tH 

d 

•H 

to 

ft 

0 

P 

0 

p 

rH 

CO 

d 

0 

0 

d 

0 

to 

to 

oj 

O 

0 

0 

• 

d 

Q 

to 

aj 

o 

X 

0 

H 

V. 

0 

to 

-P 

-p 

to 

> 

a 

0 

bO 

to 

•H 

aj 

o 

> 

U) 

a 

d 

ft 

aj 

o 

>» 

d 

d 

Vi 

V 

Td 

a 

0 

0 

0 

to 

0 

d 

CO 

• 

ft 

to 

f i 

V 

d 

o 

d 

d 

d 

aJ 

on 

o 

CJ 

V 

0 

d 

d 

d 

Td 

d 

0 

0 

Td 

rH 

0 

V 

aj 

d 

p 

i 

cd 

p 

> 

•H 

d 

O 

bp 

a] 

o 

0 

d 

>»  > 

to 

d 

d 

aj 

• 

o 

0 

V 

to 

-X 

to 

d 

g 

• 

d 

cd 

d 

a 

> 

3 

O 

CO 

to 

bO 

0 

d 

Td 

O 

• 

d 

1 

0 

o 

3 

o 

(1) 

CJ 

d 

0 

>> 

• 

d 

> 

d 

< 

d 

aj 

0 

-p 

o 

0 

> 

>» 

•H 

0 

Td 

+3 

•* 

•H 

C 

X 

d 

R 

CO 

to 

aj 

to 

aj 

0 

0 

CO 

0 

• 

0 

0 

ft 

X 

•H 

Td 

■P 

aj 

d 

d 

ft  P 

ft 

• 

•H 

CO 

X 

• 

d 

to 

> 

Td 

d 

-p 

>* 

bO 

o 

bO 

to 

0 

•P 

d 

> 

3 

aJ 

aj 

a 

x: 

b— 

aJ 

o 

n 

Td 

d 

d 

aJ 

d 

•H 

0 

0 

to 

d 

d 

•p 

d 

H 

d 

aj 

aJ 

aj 

Td 

P 

0 

U) 

aj 

ft 

to 

d 

Td 

-p 

d 

a/ 

to 

o 

-P 

ft 

•H 

r-H 

O 

to 

d 

0 

0 

•H 

o 

R 

rH 

•H 

rH 

P 

•H 

b- 

X 

d 

d 

a] 

> 

V 

aJ 

(0 

d 

d 

0 

a 

0 

CO 

Td 

d 

-p 

> 

aj 

Td 

P 

rH 

P 

rH 

* 

1 

d 

d 

d 

o 

•H 

CJ 

P 

aJ 

bO  P 

0 

0 

d 

d 

0 

d 

to 

d 

3 

• 

Td 

-P 

0 

d 

aJ 

aJ 

V 

on  pq 

cd 

•H 

o 

d 

CJ 

X 

aj 

V 

d 

to 

CO 

rH 

to 

o 

•H 

aj 

aJ 

Td 

Td 

X 

d 

Td 

to 

d 

o 

> 

| 

B 

d 

Td 

3 

o 

p 

d 

o 

to 

d 

to 

-p 

ft 

0 

to 

aj 

0 

d 

p 

V 

0 

o 

d 

0) 

bO 

tO 

0) 

0 

<u 

o 

d 

d 

-P 

0 

X 

aj 

Td 

d 

d 

'Td 

to 

>» 

H 

aJ 

•p 

•P 

■o 

aj 

rH 

V 

to  a 

aJ 

ft 

d 

o 

to 

d 

bO 

aj 

•H 

•H 

V 

d 

d 

ft 

a 

o 

0 

0 

on 

0 

d 

•H 

to 

aj 

V 

d 

aj 

O 

d 

0 

•H 

X 

d 

d 

> 

< 

d 

0 

bO 

d 

aJ 

d 

i 

-P 

rH 

•H 

d 

aJ 

0 

d 

aJ 

•H 

O 

d 

1 

aJ 

>» 

•H 

Td 

o 

d 

d 

d 

•H 

0 

CT  H 

0 

-p 

O 

•H 

•H 

aj 

d 

T-3 

V 

O 

rH 

0 

• 

P 

a) 

0 

0 

d 

d 

d 

d 

o 

•H 

0 

d 

0 

* 

Td 

a 

•H 

d 

d 

-P 

rH 

aj 

Td 

to 

d 

0 

0 

0 

aj 

d 

x 

aJ 

bp 

3 

S 

• 

d 

B 

>N 

d 

Eh 

0 

3 

•P 

• 

T-3 

•H 

d 

d 

> 

d 

d 

o 

Td 

aJ 

d 

X 

a 

rH 

-p 

a 

d 

Td 

o 

-P 

0 

a 

•H 

d 

Td 

-p 

•H 

0 

d 

3 

X 

Q 

0 

aj 

0 

•H 

0 

0 

P 

o 

to 

< 

to 

»d 

CJ 

d 

d 

•» 

d 

d 

aJ 

d 

0 

d 

d 

•H 

CO 

0 

a 

bO  -P 

P 

P 

0 

bO 

d 

bO 

to 

>N 

0 

0 

>»  V 

0 

• 

•*"3 

> 

bO 

•H 

•H 

d 

bO 

aj 

o 

to 

to 

d 

aJ 

ft 

d 

bO 

>» 

rH 

d 

d 

p 

aJ 

d 

to 

u 

bO 

Td 

aj 

bO 

d 

O 

d 

•H 

d 

V 

d 

o 

O 

-p 

d 

0 

0 

d 

a 

•H 

d 

aJ 

rH 

aj 

•H 

•H 

aj 

d 

u 

•H 

> 

d 

d 

3 

on 

•H 

0 

•H 

d 

o 

0 

d 

0 

Td 

to 

0 

0 

•H 

> 

< 

0 

aj 

>»  -P 

ft 

**"3 

0 

a 

C 

o 

0 

0 

on 

O 

0 

d 

d 

CO 

ft  Td 

•H 

to 

aj 

P 

d d 

Td 

p 

d 

aj 

aj 

d 

B 

a 

d 

•H 

B 

rH 

ft 

>» 

0 

3 

•H 

d 

•H 

0 

o 

ft 

0 

d 

rH 

aj 

> 

P 

d 

d d 

V 

d 

ft 

o 

> 

d 

H 

♦H 

0 

M 

d 

P 

0 

o 

ft 

r— 1 

d 

Q 

-P 

aJ 

a 

CO 

a) 

+> 

0 

to 

ft 

0 

< 

•H 

Q 

d 

o 

aj 

p 

x m 
to  a 
•h  0 
H Q 
ft 


oj 

CM 


bo  0 

•H  0 

o 

o 

o 

o 

rH  ft 
ft 

rH  ft 
aj  d 

On 

rH 

CM 

CM 

P 0 

on 

on 

t— 

on 

O 0 

H 

CM 

rH 

Eh  O 

to 

CO 

(0 

>> 

d 

d 

d 

d X 

o 

o 

o 

3 0 

•H 

0 

•rH 

•H 

«— 3 TJ 

U 

d 

d 

0 

d d 

0 

o 

0 

H H 

CO 

R 

CO 

CO 

o 

Os 


cd 

ft 


0 

a 

o 

R 


• 

aj 

g 

§ 

o 

aj 

8 

0 

S ** 

i 

• • 

• 

X 

EH 

>» 

0 

X o 

M 

c 

d a) 

O d 

0 

(0  • 

o 

^ c 

* 

in  S 

aj 

aJ  ft 

aj 

K 

•H 

ft  *H 

0 

to 

Eh 

r—| 

p 

1 ft 

rH 

0 H 

1 

ft 

•* 

a) 

X o 

rH 

d aj 

0 

•* 

X 

0 

to  d 

•H 

d o 

rH 

to 

0 

0 

*h  a) 

> 

o 

P 

0 

•H 

•H 

ft 

0 o 

X 

X P 

P 

rH 

§ 

> 

rH 

o 

d to 

aJ 

rH 

3 

d 

<d  • 

d 

•H  0 

0 

d 

•H 

3 

K 2 

i2 

< ^ 

CO 

ft 

5 

>h 

C/3 

M 

'T  'a! 

ft  d 


d 

i d 

Td 

0 

d 

aJ 

0 

aj 

to  d 

0 

•H 

O 0 

d 

p 

P 

d 0 

p 

d 

d to 

0 

to 

H 

aj  p 

•H 

0 

-d  h 

Td 

aj 

0 

d d 

d 

a 

0 

ft 

ft 

EH  H 

ft 

< 

ft 

ft 

O 

o 

o 

o 

ft 

1 

rH 

rH 

on 

1 

1 

CM 

d 

C— 

o 

O 

o 

p- 

o 

ft 

ON 

rH 

rH 

1 

-zr 

0 

b- 

1 

1 

1 

b- 

1 

rH 

1 

o 

V 

o 

ft 

ft 

aj 

pq 

ft 

ft 

ft 

b- 

o 

ft 

0 W 
CJ  «* 
d H 

a 9 
!«§ 


bO 

d 

a 


3 

Q 


9 


O 

pq 


aj 

Td 

cd 

d 

aj 

o 


3 S 

s ^ 

aj  £ 
Q « 


VO 

iH 

O 


b- 

CM 


b— 

CJ 


279 


31 


g 

Cm 


d) 
i— I 


I 

G I 

> 00 
G 


0) 

P t i 
AJ  C 
C G 
G 


G «m 
Cm 
* •*  O 
to  to  dt 
p 
X 


O 

P 


I 

CO 
CO  3 


<u  a) 

O H 


a) 

> • 
•H  hO 
dt  dt 
a P 
4) 


dt 

c 

P 

bO  H 
G d) 


O 

P 

a 

o 


I 

-p 

3 3 
O G 


3 

d) 

* 3 

3 G 


G G 


G 


3 
t o dj 
^ to 
d)  aj 

dt  dj 

« G 


o 

»H 

. 

rH 

<D 

to 

•H 

+> 

aJ 

-3 

d) 

p 

a J 

• 

P 

<M 

• 

n 

O 

ft 

aj 

d) 

O 

G 

ft 

at 

d) 

G 

c 

B 

o 

d) 

P 

dt 

•H 

ft 

H 

53 

Cm 

J- 

ft 

d) 

G 

rt 

P 

X 

P 

d> 

G 

G 

•H 

3 

CO 

o 

dt 

t- 

P 

c 

ft 

C 

rH 

c 

X 

<U 

3 

<M 

* 

<D 

G 

aj 

<D 

G 

o 

G 

CO 

t) 

•rl 

CO 

TJ 

VO 

X 

p 

rH 

X 

m 

<M 

o 

CO  AJ 

p 

o 

P 

P 

P 

>»  H 

• 

G 

•H 

ft 

d) 

3 

d> 

aJ 

»H 

G 

aj 

3 

at 

p 

O 

03 

3 

ft 

aj 

•H 

>»  X 

•H 

3 

G 

d) 

G 

o 

d) 

to 

p 

C 

TJ 

O 

ft 

•H 

P 

P 

dJ 

•H 

ft 

CO 

rH 

g 

3 

a3 

to 

aj 

> 

O 

3 

G 

O 

Cm 

s 

CO 

c 

T* 

aj 

»H 

•H 

G 

P 

aj 

< 

to 

G 

G 

> 

G 

G 

(1) 

G 

• 

d) 

> 

•H 

G 

h 

p 

O 

P 

O 

G 

d> 

c 

G 

P 

O 

ft  Cm 

rH 

3 

O 

3 

• 

O 

• 

• 

3 

rH 

> 

•H 

3 

to 

ft 

G 

rH 

C 

c 

aj 

d) 

d) 

aj 

3 

c 

C 

ft 

d) 

ft 

CO 

O 

i— i 

o 

H 

ft 

X 

CO 

ft 

rH 

dt 

d) 

G 

3 

3 

<D 

•H 

d) 

d) 

> 

CO 

rC 

> 

d) 

ft 

o 

•H 

aj 

rH 

d) 

• 

*H 

t— 

aj 

o 

d) 

M 

O 

rH 

CO 

ft 

ft 

U 

X 

P 

a 

G 

• 

G 

d) 

P 

<D 

P 

<D 

d) 

o 

G 

dJ 

G 

TJ 

aj 

rH 

P 

aj 

rH 

5h 

d) 

H 

G 

3 

ft 

G 

• 

o 

C 

3 

• 

G 

<u 

o 

rH 

G 

G 

p 

G 

to 

P 

rH 

Cm 

O 

to 

d) 

aj 

<G 

•H 

G 

O 

rH 

aj 

AJ 

P 

d) 

■r-3 

3 

*H 

ft 

AJ 

aj 

aj 

•H 

CO 

> 

LA 

3 

** 

•H 

X 

3 

aJ 

O 

ft 

aj 

to 

d) 

rH 

ft 

•H 

G 

g 

aj 

3 

ft 

c 

P 

dt 

O 

O 

s 

d) 

O 

o 

on 

to 

P 

Cm 

P 

B 

P 

>» 

o 

O 

G 

rH 

C 

P 

C 

(1) 

CO 

C 

ft  AJ 

dt 

> 

d) 

to 

ft 

•H 

o 

ft 

3 

U 

U 

G 

TJ 

• 

CO 

G 

o 

«m 

CO 

O 

rH 

•H 

P 

•H 

G 

d) 

d) 

<D 

O 

> 

O 

ft 

(X 

d) 

•H 

dt 

aj 

dt 

ft 

ft 

d) 

o 

►H 

to 

rH 

•H 

aj 

O 

3 

G 

X 

X 

P 

Cm 

O 

to 

CO 

to 

G 

•H 

d) 

X 

cd 

aj 

CO 

3 

ft 

ft 

CO 

d) 

ft 

X 

•H 

P 

ft 

N 

p 

P 

P 

c 

TJ 

d) 

P 

U 

| 

h 

Cm 

ft 

B 

> 

•H 

•H 

Tj 

3 

to 

O 

P 

rH 

B 

G 

dt 

AJ 

Vt 

CO 

ft 

Cm 

P 

Cm 

CO 

aj 

»H 

3 

»H 

<u 

> 

•H 

Cm 

d) 

P 

«m 

d) 

X 

to 

P 

dJ 

Cm 

aj 

C 

aj 

P 

3 

C 

dJ 

g 

o 

aj 

dt 

O 

rH 

tJ 

o 

c 

<D 

X 

AJ 

p 

Tj 

O 

CO 

C 

O 

ft 

•H 

N 

P 

aj 

G 

O 

to 

<u 

o 

p 

ft 

> 

3 

3 

P 

r 

aJ 

d) 

p 

CO 

u 

o 

rH 

<D 

TJ 

aj 

d) 

1 

CO 

p 

AJ 

*H 

d) 

to 

to 

B 

•H 

X 

c 

p 

ft 

aj 

rH 

d) 

d) 

Cm 

G 

o 

Tj 

aj 

p 

C 

P 

T> 

p 

d) 

aj 

Cm 

G 

T> 

CO 

c 

G 

d) 

G 

to  Tt 

dJ 

rs 

d) 

c 

d) 

to 

O 

ft 

C 

aj 

O 

o 

d) 

d) 

<D 

> 

G 

P 

r 

3 

G 

aj 

aj 

aJ 

O 

G 

*H 

•H 

G 

T* 

3 

•H 

d) 

c 

<D 

to 

3 

a) 

3 

rH 

dt 

p 

ft 

Jh 

P 

rH 

d) 

to 

C 

3 

P 

G 

O 

G 

3 

G 

aj 

rH 

G 

JM 

aj 

tJ 

rH 

AJ 

O 

d) 

to 

rH 

AJ 

o 

X 

to 

o 

p 

g 

aj 

ft 

ft 

ci 

o 

•rH 

O 

a! 

•H 

d) 

O 

to 

dJ 

ft 

d) 

* 

aj 

P 

d) 

a 

rH 

G 

•H 

•H 

p 

CO 

Cm 

o 

CO 

aj 

o 

rH 

<u 

S 

ft 

G 

3 

U 

u 

c 

o 

s 

to 

u 

o 

•H 

to 

6 

p 

G 

ft 

d) 

G 

3 

aj 

G 

T> 

G 

d) 

d) 

TJ 

aj 

ft 

c 

dt 

ft 

d) 

O 

d) 

G 

ft 

♦H 

o 

G 

3 

G 

•H 

c 

rH 

c 

O 

Cm 

O 

d) 

G 

X 

•H 

(U 

G 

o 

G 

P 

C 

O 

G 

O 

X 

c 

G 

w 

ft 

aj 

<p 

P 

>» 

aj 

CO 

< 

B 

M 

ft 

TJ 

W 

<P 

w 

Vh 

d) 

o 

< 

Cm 

CO 

O 

> 

aj 

3; 

O 

p 

P 

CO 

aj 

ft 

ft 

P 

o 

aj 

U 

h- 

-p 

ft  AJ 
tO  o 


ft  ft 
G 31 
+5  O 
O O 

H o 


o 

VO 


& X 
3 dt 
-*-5  3 
G G 


O 

0 

G 

H 

dt 

d) 

•H 

dt 

dt 

O 

dt 

G 

G 

G 

G 

G 

G 

G 

G 

G 

P 

d> 

O 

O 

dt 

o 

o 

P 

O 

G 

CO 

« 

S=J 

CO 

ft 

ft 

2 

ft 

ft 

3 

Vi 

G 

• 

JM 

CO 

•H 

aj 

ft 

aj 

rH 

dt 

P 

ft  ^ 

dt 

to 

X 

aj 

o 

rH 

to 

ft 

dt 

o 

G 

%> 

CJ 

o 

rH 

G 

O P 

G 

H 

H 

• 

p 

P 

W 

* 

P 3 

dt 

*» 

ft 

> 

to 

G 

O 

G 

to 

CO 

p 

aJ 

O G 

5 

O 

sz; 

G 

o 

*3 

O 

G 

3 

3 G 

G 

3 

o 

p 

G 

G 

O 

G dt 

ft 

C 

*H 

G 

G 

3 

P 

3 

aj  — 

G 

X 

G 

d) 

> 

rH 

G 

G 

rH 

• 

rH 

8 

E5 

£ 

3 

rH 

Q 

a) 

G 

p 

CO 

h 

ft 

ft 

w 

M 

ft 

w 

o 

CO 

M 

aj 

ft 


It 

ft 


aj 
G 
O 
ft 
ft  P 
Cm  aj 
ft  C 
ft  G 
G dt 
ft  -P 

< c 


G 

o 

DC 


G 

aj 

G 

H 


G 

o 

DC 


G 

aj 

G 

H 


aj 

ft 

< 

C 


d> 

I 

£ 


00 

VO 

I 

03 

I 

u 

ft 


I 

ft 


-3- 

t— 


9 


I 

t— 

O 

t— 


t- 

-X 

t*— 


CO 

C\J 


I 

c— 


£ 

I 

EG 


rH 

H 

H 

rH 

rH 

rH 

3 

dt 

CO 

dt  to 

dt  CO 

G 

c 

G 

C G 

G G to 

d) 

C3 

rH 

G rH 

G H 

G 

G 

G 

X 

o 

to 

o to 

o to  P 

p 

•H 

►H 

AJ 

Q 

3 

ft  3 

ft  3 dt 

dt 

dt 

dt 

O 

t> 

0 

O O 

C->  O o 

o 

o 

O 

Q 

S 

ft 

2 ft 

2ft  rt 

m 

« 

m 

ft 

o 

EG 


I 


o 

t- 

IA 

P- 

P 

o 

CVI 

CVi 

rH 

rH 

H 

P 

CO 

-3- 

oo 

ON 

ON 

ON 

ON 

On 

ON 

ON 

On 

CO 

Injuries Fatalities 

Injury  Total  Flight  Flight 

1975  Type  Model  Airline  Location  Index  Occup  Deck  Crew  Pass  Deck  Crew  Pass  Remarks 

8 2k  Boeing  7^7  United  San  Francisco  to  None  268  0 0 0 0 0 0 Enroute  engine  fire.  Landed  with- 

Honolulu  out  incident. 
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7 25  McDonnell  DC-10-10  Continental  Seattle,  Wash.  None  199  0 000  00  One  engine  shutdown  required  in 

Douglas  landing.  All  passengers  deplaned 

normally. 
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Boeing  737  Frontier  Eagle,  Colo.  Serious  8 0 010  00  Water  tank  failure  shorted  pressure 

controller  with  loss  of  cabin 
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3 21  McDonnell  DC8-63F  Flying  Tiger  Las  Vegas,  Nev.  Serious  175  0 110  00  Turbulence.  Stewardess  serious 

Douglas  injury  and  minor  injury  to  1 
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Ifijuries Fatalities 

Injury  Total  Flight  Flight 

1975  Type  Model  Airline  Location  Index  Occup  Deck  Crew  Pass  Deck  Crew  Pass  Remarks 

1 15  McDonnell  DC-9  KLM  Casa  Blanca  Minor/  51  0 0 0 0 0 0 Late  touchdown.  Skidded  to  stop 
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APPENDIX  E 

The  following  provides  an  example  of  the  systems  analysis  approach  necessary  to  completely  and  ob- 
jectively analyze  hardware  and  concepts  as  prepared  in  1971  [Snyder  and  Robbins,  1971  (22)].  While  the 
present  study  includes  over  double  the  concepts  and  there  have  been  major  advances  in  several  of  the  sys 
terns  evaluated  at  that  time,  this  section  is  included  without  modification  as  an  illustration  of  the  sys 
terns  approach  as  applied  to  evaluation  of  air  transport  technology. 


SYSTEMS  ANALYSIS  OF  CRASH  IMPACT  AND  ESCAPE  CONCEPTS 
D.  Hurley  Robbins,  Ph.D. 


The  objective  of  this  section  of  the  report  is  to  present  a systems  study  of  the  various  concepts 
and  hardware  relating  to  crash  impact  protection  and  escape  from  the  viewpoint  of  safety,  reliability, 
maintainability,  human  factors,  and  technological  considerations.  An  event-oriented  flow  diagram  of  crash 
impact  and  escape  from  an  aircraft  is  presented  to  aid  in  assessing  the  feasibility  of  the  various  con- 
cepts and  hardware  under  evaluation. 

A.  Event-Oriented  Systems  Study 

In  order  to  provide  a framework  to  determine  the  function  level  of  each  of  the  concepts  included  in 
this  study,  an  event-oriented  flow  chart  of  the  crash  and  escape  event  has  been  prepared  (See  Figure  55). 

The  various  events  of  a crash  are  included  from  system  installation  to  egress  after  a crash.  Each  item 
can  critically  affect  survival  in  event  of  a crash. 

The  first  item  deals  with  system  installation  and  configuration  maintenance.  If  a device  is  im- 
properly installed  or  maintained,  survival  of  one  or  many  is  endangered.  For  instance,  an  improperly 
charged  airbag  inflation  device  could  malfunction  resulting  in  an  undeployed  restraint  system.  The  occu- 
pant could  receive  an  impact  injury  and  become  immobile.  Preflight  briefing  and  crew  training  has  been 
included  as  the  next  event.  Many  studies  have  shown  the  benefit  of  a briefing  on  passenger  use  of  re- 
straint systems.  Crew  training  must  be  adequate  to  insure  proper  use  of  exits. 

When  a survivable  crash  event  is  imminent,  the  crew  may  be  aware  or  unaware.  In  documented  cases, 
the  crew  has  been  unaware  or  unable  to  take  action  regarding  a certain  crash.  In  these  cases,  automatic 
arming  of  explosively-formed  exits  would  be  necessary. 

Passenger  warning  can  be  effective  in  preparing  occupants  for  a crash.  Benefits  include  proper 
positioning  and  bracing  for  the  most  effective  use  of  restraint  systems.  Also,  the  techniques  of  egress 
could  be  established  to  enhance  its  efficiency. 

Because  of  the  variety  of  seating  configurations  which  may  be  found  in  the  subject  aircraft,  front-, 
side-,  and  rear-facing  seating  have  been  listed  separately.  In  addition,  the  out-of-position  occupant  is 
considered.  Given  current  restraint  systems  technology  and  the  differences  in  human  impact  tolerance  to 
blows  from  different  directions,  the  design  goals  may  very  well  be  different  in  each  case. 

The  crash  event  itself  certainly  influences  the  survival  problem.  The  optimum  case  is  probably  a 
crash  on  flat  and  open  terrain.  A high-wing  aircraft  has  been  observed  to  offer  considerably  less  time 
for  escape  than  a low-wing  aircraft  in  event  of  a ditching.  Rough  terrain  most  likely  increases  the  like- 
lihood of  high  impact  G-loadings,  thus  also  affecting  survival. 

During  the  impact  the  occupants  may  range  from  uninjured  to  fatally  injured.  An  immobile  passenger 
presents  nearly  the  same  egress  problem  as  a fatally  injured  passenger  as  he  may  block  available  exits 
thus  preventing  the  escape  of  other  passengers. 

The  post-crash  environment  strongly  affects  egress.  Smoke  and  flames  hinder  most  normal  physical 
and  psychological  functions.  The  presence  of  automatic  or  live  instructions  can  aid  dramatically  in  egress. 

Because  of  restraint  system  use,  egress  from  these  protective  devices  is  included  as  a separate  event. 
It  is  possible  that  time  could  be  lost  pushing  airbag  material  out  of  the  way  in  leaving  seating  positions. 

Protection  from  smoke,  fumes,  and/or  fire  is  believed  to  be  important  to  survival.  A few  minutes 
added  breathable  air  in  a cluttered  and  smoky  cabin  could  possibly  be  the  difference  between  survival  and 
asphyxiation . 

Obviously,  the  exits  must  be  opened  to  provide  egress.  Customarily,  the  crew  opens  normal  and  emer- 
gency exits.  Occasionally,  a structural  failure  provides  a safe  exit.  Because  of  documented  cases  where 
not  enough  normal  exits  were  available,  the  option  for  automatically  produced  exits  is  included. 

It  is  often  the  case  that  some  exits  are  unavailable.  This  is  particularly  the  case  when  a fire 
exists  outside  the  aircraft  and  when  structural  damage  has  jammed  the  doors. 

Particularly  in  the  case  of  darkness  and  smoke  the  routes  to  available  exits  can  be  difficult  to 
locate.  Audio  visual  and/or  tactile  signals  can  improve  ability  to  egress  quickly. 
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When  an  occupant  reaches  an  exit,  egress  can  be  provided  by  several  techniques.  As  some  have  proved 
more  effective  than  others,  a variety  of  egress  techniques  are  included. 

The  Subject  Systems 

A total  of  seventy-four  systems  have  been  chosen  for  inclusion  in  the  safety,  maintainability, 
human  factors,  reliability,  and  technological  analyses  which  follow.  These  are  gathered  from  the  pre- 
vious sections  of  the  report  and  can  be  grouped  roughly  in  the  following  categories:  1.  airbag  infla- 

tion devices;  2.  crash  impact  sensors;  3.  airbag  materials;  4.  airbag  coating  materials;  5.  crash 
impact  restraint  systems;  6.  smoke  hood  concepts;  7.  aisle  and  path  markers;  8.  warning  and  public 
address  systems;  and,  9.  other  technology.  Most  of  these  concepts  are  discussed  at  length  in  preceding 
chapters.  Restraint  systems  concepts  other  than  the  airbag  and  its  components  have  not  been  discussed 
previously  and  are  included  for  purposes  of  comparison.  The  list  is  given  in  Table  XIV.  The  number  with 
each  system  is  used  in  the  tables  which  follow  for  purposes  of  identification. 


TABLE  XIV. 

LIST  OF  IMPACT  PROTECTION  AND  ESCAPE  SYSTEMS 
Airbag  Inflation  Devices 

1.  Stored  gas  system. 

2.  Stored  gas  system  with  modulated  flow. 

3.  Augmented  air  system. 

4.  Augmented  air  system  with  staging. 

5.  Liquid-cooled,  solid  propellant  system. 

6.  Solid-colled,  solid  propellant  system. 

7.  Aspirator  systems. 

Crash  Impact  Sensors 

8.  Mechanical  sensor. 

9.  Sensor  using  signals  from  inertial  navigation  system. 

10.  Radar  proximity  sensor. 

11.  Sonar  proximity  sensor. 

Airbag  Materials 

12.  Nylon 

13.  Polyester 

14.  Glass 

15.  Cotton 

Airbag  Coating  Materials 

16.  Natural  rubber 

17.  Butyl 

18.  Neoprene 

19.  Polyvinyl  chloride  (PVC) 

20.  Polyurethane 

21.  E.P.D.M. 

22.  Hypalon 

Restraint  Systems 

23.  Inflating  occupant  restraint  system  for  passenger 
use  in  rear-facing  seats 

24.  Inflating  occupant  restraint  system  for  passenger 
use  in  side-facing  seats 

25.  Inflating  occupant  restraint  system  for  crew  use 
in  front-facing  seats. 

26.  Rear-facing  seats  with  lap  belt 

27.  Passive  net  system  (Nissan) 

28.  Passive  blanket  system  (Hamill) 

29.  Front-facing  seat  with  upper  torso  harness 

30.  Troop  seat 

Smoke  Hood  Concepts 

31 . Boeing  mask 

32.  John  Hand  hood 

33.  Racine  Gove  Company  hood 

34.  Sierra  Engineering  Company  hood 

35.  Life  Support  Systems  hood.  (A)  Elastic  neck  seal  type 

36.  Life  Support  Systems  hood.  (B)  Lanyard  neck  seal  type 

37.  Scott-O-Vista  mask 

38.  Mine  Safety  Appliance  Company.  (A)  88180  cansister 

device 

39.  Mine  Safety  Appliance  Company.  (B)  Sel f- rescuer . 

40.  North  American  Rockwell  fire  hood  concept 
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41.  North  American  Rockwell  fire  mask  concept 

42.  Schjeldahl  hood.  (A)  Drawstring  model 

43.  Schjeldahl  hood.  (B)  Septal  neck  seal  model. 

44.  Experimental  FAA  (Schjeldahl)  hood.  Self-contained 
air  supply. 

45.  Bureau  of  Mines  (Westinghouse/Schjeldahl ) portable 
breathing  apparatus.  Chlorate  candle. 

46.  FAA  (Schjeldahl)  hood.  Advanced  concept. 

Aisle  and  Path  Markers 

47.  Chemical  illumination 

48.  Charge  activated  electro-illumination 

49.  Ultraviolet  illumination 

50.  Phosphorescent  illumination 

51.  Incandescent  illumination 

52.  Self- luminescence  (tritium) 

53.  Tactile  markers 

54.  Floor  level  markers 

55.  Pulsating  markers 

Warning  and  Emergency  Public  Address  Systems 

56.  Alarm  bell 

57.  Bull  horn 

58.  Solid  state  device 

59.  Operational  TWA  visual/aural  system 

Other  Technology 

60.  ELSIE 

61.  Telescape 

62.  Escape  rope 

63.  External  platform  slide  entry 

64.  Integrated  escape  system 

65.  Folding  slide 

66.  Cargo  door 

67.  Ablative-coated  exit 

68.  Passenger  conveyor 

69.  Inflating  slide/liferaft 

70.  Double  slide 

71.  In-flight  egress  by  paracone. 

72.  In-flight  egress  by  rapidjet. 

73.  In-flight  escape  by  capsule-chute 

74.  In-flight  escape  by  fuselage  parachute 


B.  System  Safety 

A variety  of  factors  must  be  included  to  conduct  the  preliminary  hazard  analysis  and  to  estimate  the 
safety  of  the  subject  systems.  The  seventy-four  crash  impact  and  escape  concepts  are  rated  with  respect 
to  twenty-  five  criteria  such  as  noise  level,  human  error  potential,  as  given  in  Table  XV,  etc.  The 
rating  scheme  for  each  of  the  criteria  is  defined  in  Table  XVI.  As  an  example  of  the  use  of  Table  XV 
consider  the  noise  level  of  a stored  gas  airbag  inflation  device.  Noise  level  can  be  rated  as:  1.  no 

problem;  2.  possible  temporary  threshold  shift;  and,  3.  possible  permanent  hearing  impairment.  In 
Table  XV  the  stored  gas  air  bag  inflation  device  received  a noise  level  rating  of  "2"  indicating  a 
possible  temporary  threshold  shift  on  the  basis  of  experiments  carried  out  using  human  volunteer  test 
subjects . 

C.  Reliability  Considerations 

The  analysis  of  reliability  is  tied  closely  to  the  event-oriented  flow  chart  shown  in  Figure  55. 

The  specific  items  which  will  be  included  in  the  reliability  study  are: 

a.  required  function  and  failure  definition  (coupled  with  the  flow-chart) 

b.  critical  time  periods  in  exercise  of  function 

c.  external  environmental  stresses  under  which  each  element  must  function;  e.g.  temperature  range 
from  -65° F to  200° F 

d.  effects  of  storage,  shelf-life,  packaging,  transportation,  handling,  and  maintenance;  e.g. 
evaluation  of  components  which  deteriorate  with  age 

e.  identification  of  reliability  critical  items  which  significantly  affect  ability  of  systems  to 
function  (coupled  with  the  flowchart). 

It  has  not  been  found  possible  to  develop  a numerical  rating  system  for  the  seventy-four  subject 
systems.  Rather,  in  Table  10  each  of  the  systems  is  handled  individually  with  brief  verbal  evaluations 
used  for  each  of  the  reliability  items. 

D.  Maintainability  Considerations 

Each  system  and  subsystem  has  been  subjected  to  a preliminary  maintainability  analysis  with  respect 
to  the  following  items: 


a.  simplified  maintenance  activities 
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b.  major  repairs  by  depot  level  maintenance; 

c.  necessary  inspection;  and 

d.  projected  requirements  for  facility,  personnel,  tools,  etc. 

It  has  been  possible  to  develop  a numerical  rating  system  to  assess  maintainability.  The  definition  of 
the  rating  system  is  included  with  the  analysis  on  Table  XVIII. 

E.  Human  Factors  Considerations 

The  human  factors  considerations  which  are  involved  in  evaluating  system  performance  include 
nearly  all  conceivable  aspects  of  human  function  and  performance.  Both  physiological  and  psychological 
stresses  are  likely  to  be  at  peaks  emphasizing  the  detail  which  must  be  included  in  this  evaluation.  The 
seventy-four  systems  are  rated  with  respect  to  seventeen  criteria  ranging  from  ease  of  use  to  anthro- 
pometric considerations.  The  rating  scheme  for  each  of  the  criteria  is  defined  in  Table  XIX  and  the 
actual  analysis  given  in  Table  XX. 

F.  Technological  Aspects 

Factors  relating  to  hazards,  reliability,  maintainability,  and  human  performance  must  be  considered 
to  form  an  estimate  of  a system's  ability  to  perform  properly.  Other  engineering  and  technological 
factors  which  do  not  fit  in  the  above  categories  must  also  be  included  to  prove  the  feasibility  of  a 
system  for  the  intended  application.  Therefore,  the  following  considerations  will  be  included: 

a.  durability, 

b.  lightness, 

c.  compactness, 

d.  integration  of  all  equipment  within  the  aircraft  without  restricting  crew  functions, 

e.  automatic  functions, 

f.  common  equipment  permanently  installed  in  aircraft, 

g.  engineering  state-of-the-art. 

The  rating  scheme  for  each  of  these  criteria  is  defined  on  Table  XXI.  and  the  analysis  given. 

G.  System  Results 

When  the  tables  in  this  section  of  the  report  are  studied,  particular  potential  performance  patterns 
are  observed  for  the  various  groups  of  life  support  systems  which  have  been  evaluated.  In  the  text  which 
follows,  summary  safety,  reliability,  maintainability,  human  factors,  and  technical  feasibility  paragraphs 
are  written  for  the  following  groups  of  systems:  1.  airbag  inflation  devices;  2.  crash  impact  sensors; 

3.  airbag  materials;  4.  airbag  coating  materials;  5.  restraint  systems;  6.  smoke  protective  devices; 

7.  aisle  and  path  indicators;  8.  emergency  warning  and  public  address  systems;  9.  emergency  exits; 

10.  interior  egress  aids;  11.  exterior  egress  aids,  and,  12.  in-flight  egress. 

A variety  of  comparisons  can  be  made  with  regard  to  the  various  airbag  inflation  devices. 

Reliability  is  a consideration  whether  the  system  is  in  use  or  stored.  The  propellant  and  aspirator 
systems  are  estimated  to  possess  higher  reliability  than  stored  gas  systems  because  of  problems  with 
leakage.  All  inflation  devices  require  careful  handling  because  of  the  danger  of  inadvertent  actuation. 
Special  maintenance  procedures  would  be  necessary.  All  these  systems  have  proven  capability  for  accom- 
plishing bag  inflation  based  on  prototype  development  occurring  within  the  past  few  years.  However,  the 
bulkiness  and  weight  must  be  assessed  as  an  important  variable  in  an  aircraft  application.  The  stored 
gas  systems  suffer  the  greatest  penalty  in  this  context. 

A penalty  is  paid  in  introducing  these  systems  with  respect  to  several  human  factors.  The  fact 
that  inflation  noise  is  known  to  result  in  a temporary  threshold  shift  in  hearing  could  reduce  the  ability 
of  the  user  to  respond  to  oral  commands  and  emergency  information  post-crash.  In  addition,  systems  using 
propellants  and  pyrotechnic  components  can  produce  thermal,  toxicological,  pyrotechnic,  and  also  the 
associated  psychological  hazards.  Air  bag  inflation  systems  should  be  classified  at  least  as  Hazard  Level 
II  devices. 

Crash  impact  sensors  are  a reliability  critical  item.  They  depend  on  a well-defined  G-signal 
representing  a crash  or  the  proximity  of  a hazard  which  could  result  in  a crash.  This  has  been  one  of 
the  major  problems  in  the  introduction  of  inflating  restraint  systems  in  automobiles  and  less  information 
is  available  defining  the  crash  impact  event  in  aircraft.  Although  it  appears  that  accurately  functioning, 
maintenance-free  sensing  devices  can  be  fabricated,  research  on  this  item  is  essential  before  serious 
consideration  of  passive  restraints  for  jet  transport  application. 

The  fabric  material  in  an  air  bag  would  appear  to  be  one  of  the  smaller  problems.  Materials  with 
adequate  weight-to-strength  ratios,  high  and  low  temperature  resistance,  and  storability  are  available. 
Although  a glass  fabric  has  many  ideal  properties  for  this  application,  rip-stop  nylon  is  lighter  and 
more  extensible. 

Likewise,  the  material  with  which  an  airbag  is  coated  offers  few  problems.  Neoprene,  the  most 
likely  candidate,  has  excellent  storage  and  temperature  characteristics. 

Comparisons  are  made  in  the  tables  presented  in  this  chapter  between  a variety  of  restraint  systems. 
With  respect  to  reliability,  it  is  not  essential  to  supplement  a rear-facing  passenger  seat  with  an  air- 
bag. Introduction  of  the  airbag  may  hamper  egress  from  the  seat.  Side-facing  seating  configurations 
need  added  research  to  determine  placement  of  the  airbag  for  impact  protection. 

It  should  be  noted  that  the  sensor,  the  inflation  device,  and  bag  placement  are  all  reliability 
critical  items  needing  additional  study  before  introduction  in  front-facing  configurations  for  crew  use. 
Reliable  bag  placement  is  particularly  important  in  this  application  because  of  the  necessity  of  crew 
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function  in  controlling  the  aircraft  during  an  emergency  landing  incident  which  can  cover  a time  period 
of  several  seconds.  The  sensor,  deployment  technique,  and  placement  are  equally  important  in  passive 
net  systems.  In  conclusion,  active  restraint  systems  such  as  the  rear-facing  seat  with  lap  belt  and  the 
front-facing  crew  seat  with  integrated  upper  torso  belt  restraint  system  all  substitute  simple  hardware 
and  an  increased  human  error  potential  (the  act  of  fastening  belts)  for  the  technologically  complex 
passive  restraint  hardware. 

The  introduction  of  passive  restraint  systems  requires  more  sophisticated  maintenance  procedures  than 
the  operational  active  systems.  For  example,  automatically  deployable  systems  should  be  checked  for  ready 
status  before  each  flight.  In  addition,  the  passive  systems  require  careful  handling  during  maintenance 
because  of  explosive,  pyrotechnic,  and  propellant  components. 

Several  general  technological  items  should  also  be  mentioned.  Belt  systems  are  lighter  in  weight 
and  are  more  compact  demonstrating  a distinct  advantage  over  current  generation  passive  restraint  systems. 
Also,  the  effectiveness  of  belts  in  operational  applications  has  been  proven  many  times  over  when  they 
are  used,  maintained,  and  installed  properly.  Inflating  occupant  restraint  systems  and  passive  nets  have 
yet  to  be  field  tested,  but  operational  prototypes  have  been  extensively  laboratory  tested. 

Inflating  restraint  systems  possess  several  disadvantages  and  one  major  advantage  over  active  belt 
systems  when  studied  from  the  viewpoint  of  human  factors.  The  disadvantages  are:  1.  possible  hearing 

impairment  in  the  post-crash  environment  hindering  communication;  2.  possible  visibility  decrement 
during  and  post-crash  due  to  the  bag  material;  and,  3.  a potential  for  psychological  stress  in  the 
presence  of  a propellant  or  explosive  device.  The  advantage  is  that  the  passive  nature  of  this  restraint 
decreases  the  potential  for  human  error. 

The  preliminary  hazard  analysis  also  yields  several  items  which  could  be  performance  decrements  for 
airbags.  These  are:  1.  potential  noise  hazard;  2.  hazard  level  II  device;  3.  presence  of  energy 
sources,  explosive  components,  and/or  propellants;  4.  potential  for  inadvertent  actuation;  5.  presence 
of  pressure  vessels;  and,  6.  increased  maintainability  requi rements. 

Several  of  the  smoke  protective  devices  evaluated  in  this  study  appear  to  be  reliable,  durable,  and 
relatively  maintenance  free  while  being  possibly  somewhat  difficult  to  use.  Some  components  are  known  to 
degrade  with  storage,  but  with  periodic  inspection,  individual  units  could  be  replaced.  All  systems  are 
light  and  compact  and  could  be  easily  adapted  for  use  in  current  operational  aircraft.  The  Schjeldahl, 
Scott-Q-Vista,  and  Mine  Safety  Appliance  Co.  systems  are  production  items  while  the  North  American  Rock- 
well and  FAA  advanced  systems  are  concepts.  The  remainder  of  the  systems  have  been  developed  as  proto- 
types. 


Human  factors  considerations  represent  the  most  important  items  in  developing  a decision  regarding 
introduction  of  smoke  protective  devices  in  operational  aircraft.  The  first  item  concerns  the  apparent 
decrement  in  visibility  which  occurs  with  several  of  the  systems.  The  Schjeldahl,  North  American  Rockwell 
fire  mask,  FAA  systems  possess  the  most  desirable  properties  in  this  regard.  The  second  item  concerns 
ease  of  donning.  All  systems  pose  some  problem  in  donning.  At  least  a briefing  is  required  and, 
especially  for  individuals  with  glasses,  practice  could  be  helpful.  The  third  item  concerns  toxicity. 

Most  smoke  protective  devices  are  useful  to  minimize  toxic  hazard  potential  in  a crashed  aircraft  during 
egress.  However,  they  present  a toxic  hazard  of  their  own  during  prolonged  use.  Devices  providing  a 
self-contained  air  supply  such  as  the  advanced  FAA  prototype  offer  an  advantage  in  this  area. 

A preliminary  hazard  analysis  yields  a few  items  of  concern  with  respect  to  smoke  protective 
devices.  Among  these  items  are:  1.  toxicity  problems;  2.  inadvertent  activation  of  systems  using  a 

stored  breathable  air  source;  3.  vulnerability  to  tampering  and  prolonged  storage;  and  4.  some  diffi- 
culty involved  in  system  use. 

Aisle  and  path  markers  offer  an  inexpensive,  easily  maintainable,  durable,  light,  and  compact  aid 
to  egress.  Most  of  the  systems  studied  are  production  items  with  the  exception  of  pulsating  path  markers 
which  are  concepts  with  respect  to  aircraft  application  and  tactile  markers  which  are  undergoing  pro- 
totype development.  In  considering  human  factors,  it  can  be  concluded  that  aisle  and  path  markers  can  be 
a useful  aid  provided  they  are  positioned  for  the  greatest  effectiveness  and  visibility.  It  should  be 
noted,  however,  that  tactile  markers  may  be  difficult  to  use.  A preliminary  hazard  analysis  yields  a few 
items  as  follows:  1.  possible  short  term  toxicity  estimated  particularly  with  chemical  luminescence  and 

self-luminescence;  2.  energy  sources  exist  in  most  systems  which  must  be  isolated  from  tampering  and 

impact,  3.  electrical  systems  can  be  a source  of  a fire  hazard;  and,  4.  most  systems  are  vulnerable  to 

tampering. 

Emergency  warning  and  public  address  systems  appear  to  present  more  of  a reliability  problem  than 
aisle  and  path  markers.  Two  specific  problems  are  with  power  failure  and  with  the  design  of  crash  re- 
sistant electro-mechanical  components.  However,  the  technology  is  available  to  solve  these  problems. 
Systems  of  this  nature  are  believed  to  offer  few  if  any  problems  with  maintenance,  and  they  are  durable, 
light  and  compact.  A preliminary  hazard  analysis  yields  few  problems. 

The  systems  include  under  the  general  heading  "other  technology"  can  be  placed  into  four  general 
classifications.  These  include:  1.  exits;  2.  external  aids  to  egress;  3.  internal  aids  to  egress; 

and,  4.  in-flight  egress.  Each  of  these  groups  are  discussed  individually. 

All  four  of  the  exit  concepts  studied  (ELSIE,  external  platform  slide  entry,  cargo  door,  ablative 
coated  exit)  appear  to  be  worthy  candidates  for  further  study  and  possible  introduction  into  transport 
aircraft.  Accident  experience  bears  out  the  desirability  of  introducing  exits  in  addition  to  those  known 
to  be  available  in  actual  cases.  All  four  systems  have  been  developed  as  prototypes  or  are  already  in 
operational  use. 

Reliability  appears  to  be  a primary  concern,  especially  with  ELSIE  and  the  external  platform  slide 
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entry.  Deployment  during  normal  flight  would  be  dangerous  and  a failsafe  activation  system  is  necessary. 

The  cargo  door  could  be  subject  to  jamming,  a problem  with  most  normal  exits  if  fuselage  deformation  occurs, 
limiting  its  reliability.  The  ELSIE  concept  offers  a distinct  advantage  in  that  case. 

These  systems  are  all  relatively  easy  to  use  with  ELSIE  being  the  most  difficult  to  activate.  As  it 
is  presently  conceived,  this  system  requires  two  crew  members  to  initiate  actuation  enhancing  its  fail- 
safe characteristics  but  increasing  the  chance  for  post  crash  confusion.  Crew  training  and  briefing  would 
be  required  before  each  flight.  Besides  the  hazard  associated  with  explosive  devices,  ELSIE  could  present 
a noise  problem,  temporarily  influencing  passenger  and  crew  hearing,  and  thus  affecting  communication 
during  egress.  This  potential  problem,  most  likely  minor,  should  be  investigated. 

External  egress  aids  include  the  telescape  device,  the  escape  rope,  the  folding  slide,  the  slide/ 
raft  combination,  and  the  double  slide.  These  devices  are  all  in  service  in  operational  aircraft  with 
the  exception  of  telescape  which  has  been  fabricated  and  tested  as  a prototype  and  the  folding  slide 
which  has  been  proposed  as  a concept. 

Most  of  these  systems  present  a reliability  problem  with  respect  to  deployment  with  the  exception 
of  the  escape  rope.  All  systems  are  technically  feasible  but  some  are  mechanically  quite  complex.  The 
deployment  and  structural  characteristics  of  inflating  structures  such  as  escape  slides  need  additional 
study  based  on  the  experiences  in  the  recent  Boeing  747  evacuation  at  San  Francisco  International  Airport. 
The  folding  slide  offers  the  greatest  problems  with  deployment  because  of  possible  deformation  occurring 
during  fuselage  distortion.  Again  the  systems  present  few  problems  with  respect  to  human  factors  with 
the  exception  of  the  escape  rope  and  telescape,  which  are  physically  difficult  to  use  and  may  present  a 
hazard  when  improperly  used. 

Internal  aids  to  egress  which  have  been  evaluated  include  an  integrated  passenger  escape  system  and 
a passenger  conveyor.  These  systems  are  complex  and  expensive,  requiring  much  development  and  testing. 

A cost  effectiveness  study  should  be  carried  out  to  ascertain  if  these  systems  are  economically  feasible. 

The  current  investigators  feel  that  they  are  not.  Both  systems  require  a flexible  logic  control  in  order 
to  deliver  passengers  to  the  best  available  exits.  In  addition,  both  systems  are  subject  to  many  crash 
impact  hazards  ranging  from  power  loss  to  mechanical  malfunction  to  fuselage  deformation.  The  integrated 
passenger  escape  system  has  one  characteristic  worthy  of  note.  It  attempts  to  provide  crash  impact  pro- 
tection, smoke  protection,  and  egress  in  one  package.  This  systems  approach  is  believed  necessary  in  any 
approach  to  the  overall  problem  of  crash  impact  protection  and  escape. 

In-flight  egress  is  an  extremely  difficult  problem  with  transport  aircraft.  The  four  systems 
(paracone,  rapidjet,  capsule  parachute  and  fuselage  parachutes)  are  all  complex  and  expensive  systems  for 
which  much  research  and  development  work  must  be  carried  out.  To  determine  whether  implementation  of 
any  of  these  systems  is  economical  from  the  cost-effectiveness  point  of  view,  further  study  is  necessary. 
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Figure  55.  Crash  Impact  and  Escape 
Flow  Diagram 
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1111111 

1111 

1111 

1111111 

1112  112  2 

p.  Simplicity 

12  11112 

3 4 4 4 

1111 

1111111 

44424422 

q.  Anthropometric 

considerations 

2 2 2 2 2 2 2 

2 2 2 2 

2 2 2 2 

2 2 2 2 2 2 2 

22222222 

V - not  Applicable 
i ■ insufficient  information 
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AIRBAG 

INFLATION  DEVICES 

CRASH  IMPACT 
SENSOR 

AIRBAG 

MATERIAL 

AIRBAG 

COATING  MATERIAL 

RESTRAINT 

SYSTEMS 

h n n in  io  in 

OO  O'  O H 

m sf  m 
■— 1 ■— < 

sOIMDO'OHN 
H H H H N (N  N 

n-jniciNoooio 

CMCMrsICMfsICMOJcn 

CONS  IDF.  RAT  ION 

stored  gas 

stored  gas  - mod.  flow 
augmented  air 
aug.  air  - staging 
liq.  cool  - solid  prop, 
solid  cool  - solid  prop, 
aspirator 

mechanical 
inertial  guidance 
radar  proximity 
sonar  proximity 

nylon 

polyester 

glass 

cotton 

natural  rubber 
Butyl 
neoprene 
P.V.C. 

polyurethane 

E.P.D.M. 

hypalon 

pass.  IORS  (rear  face) 
pass.  IORS  (side  face) 
crew  IORS  (front  face) 
rear  face  seat  + l.b. 
passive  net 
passive  blanket 
front  face  seat  - A.F.H. 
troop  seat 

a.  Simplified  maintenance 
in  using  unit 

1111111 

1111 

1111 

1111111 

11111111 

b.  Major  repairs  by 

depot  level  personnel 

1111111 

1111 

1111 

1111111 

11111111 

c.  Inspections 

1111111 

1111 

2 2 2 2 

2 2 2 2 2 2 2 

11121122 

d.  Projected  requirements 
for  facility,  personnel, 
tools,  etc. 

2 2 2 2 2 2 2 

2 2 2 2 

1111 

1111111 

2 2 2 1 2 2 1 1. 

a . 

Simplified  maintenance 
in  using  unit 

c.  Inspections 

1.  before  each  flight 

1 . yes 

2 . no 

2.  periodic 

b. 

Major  repairs  by  depot 

d.  Projected  requirements  for 

level  personnel 

facility,  personnel,  tools, 

1 . yes 

1 . available 

2 . no 

2.  new  equipment,  personnel 
facility  required 

N - 

not  applicable 

i - 

insufficient  information 

SMOKE  HOOD  CONCEPTS 

AISLE  AND  PATH 
MARKERS 

WARNING 
AND  P. A. 

OTHER  TECHNOLOGY 

n ec  Ji 
irnoiom 

OHNO.tiO'Cr'Oca'O^NO^ 

vOvC'CvCvC\C\CvO»C'Ct-.r'r^NtN 

CONSIDERATION 

Boeing  mask 
John  Hand  hood 
Racine  Clove  Co. 

Sierra  Eng.  Co. 

LSS  - Elastic  seal 
LSS  - Lanyard 
Scott-O-Vista 
M.S.A.C.  - canister 

M. S.A.C.  - self-rescue 

N. A.R.  - smoke  hood 
N. A.R.  - smoke  mask 
Schjeldahl  - drawstring 
Schjeldahl  - septal 
FAA  - air  supply 

B.M.  - PBA  hood 
FAA  Adv.  concept 

chem.  ilium, 
electro-ilium, 
ultra-violet 
phosphorescent 
incadescent 
self-ilium,  (tritium) 
tactile  markers 
floor  level  markers 
pulsating  markers 

alarm  bell 
bull  horn 
solid-state  device 
TWA  visual/aural 

ELSIE 

telescope  escape 
escape  rope 

ext.  plat.  - slide  entrj 
S.B.  - escape  harness 
fold,  slide 
cargo  door 
ablative  coat,  exit 
pass,  conveyor 
slide/raft 
double  slide 
in-f light /paracone 
in-flight/rapid  jet 
in-f light /capsule 
in-f light /parachute 

a.  Simplified  maintenance 
in  using  unit 

1111111111111111 

111111111 

1 1 i 1 

111121111112222 

b.  Major  repairs  by 

depot  level  personnel 

2222222222222222 

222222222 

2 2 2 2 

122222222221111 

c.  Inspections 

1111111111111111 

2 2 2 2 1 2 1 2 2 

1111 

11111112  1111111 

d.  Projected  requirements 
for  facility,  personnel, 
tools,  etc. 

1111111221111121 

111111111 

1111 

211111112112222 

Simplified  maintenance  in 

c.  Inspections 

using  unit 

1.  before  each  flight 

1 . yes 

2 . no 

2.  periodic 

Major  repairs  by  depot 

d.  Projected  requirements  for 

level  personnel 

facility,  personnel,  cools,  i 

1 . yes 

1.  available 

2 . no 

2.  new  equipment,  personnel 
or  facility  required 

N - not  applicable 
1 - insufficient  information 
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Item 

No. 

(See 

Table 

7.) 

Item 

Required 

Function 

Failure 

Definition 

Critical  time 
Period  in 
Function 
Exercise 

Effects  of 
Storage 
and 

Handling 

Reliability 

Critical 

Items 

66 

Cargo  door 

Fuselage  cargo 
door,  swing  -out 
nose  or  tail, 
used  for  rapid 
egress  of  maxi- 
mum number  of 
passengers 

Opening  mechanism 
fails  or  struct- 
ure buckles  pre- 
venting actuation 

Lmmediately  post- 
crash or  when- 
aver  emergency 
avacuation  re- 
quired 

tone  known 

Would  provide 
additional  exit 
but  not  essential 
system.  Integrity 
of  fuselage  at 
swing  points  is 
most  critical 
factor 

67 

Ablative  exterior 
coating 

Provide  heat 
shield  to  protect 
overwing  egress 
pathway 

Fails  to  retain 
ablative  char- 
acteristics , pro- 
vides undue  pen- 
alty affecting 
flight  char- 
acteristics 

egress  in  post- 
crash exterior 
fire 

None  known 

Not  a critical 
item  but  may  in- 
crease egress 
survivability. 
Effect  on  flight 
characteristics 
may  be  critical 
factor 

68 

Passenger  convey- 
er belt 

To  provide  pass- 
enger with  means 
to  locate  and 
reach  nearest 
emergency  exit 

Jams,  failing  to 
operate.  Inflicts 
injuries  on  pass- 
angers  jammed 
setween  belt  and 
seat.  Sends  pass- 
angers  in  wrong 
direction (to  non- 
aseable  exits) 

Emergency  egress, 
post-crash  egress 

None  known 

Not  essential 
system  for  egress 
Structural  fail- 
ure during  crash 
may  render  inop- 
erative; direct- 
ional control  may 
be  imperative 

69 

Slide/raft 

Emergency  egress 
to  ground  or 
water 

Failure  to  deploy 
punctures , inadve 
tently  actuates 

, Immediately 
r-post-crash  or 
whenever  emer- 
gency evacuation 
required 

None  known. 
Periodic  inspec- 
tion recommended 

Provides  critical 
egress  function. 
Mechanical  deploy 
ment  failure 
critical 

Item 

No. 

(See 

Table 

7.) 

Item 

Required 

Function 

Failure 

Definition 

Critical  time 
Period  in 
Function 
Exercise 

Effects  of 
Storage 
and 

Handling 

Reliability 

Critical 

Items 

71 

In-flight  egress 
paracone 

In-flight  emer- 
gency egress 

Fails  to  deploy; 
Deploys  but  fails 
to  slow  down 

immediately  fol- 
lowing identifi- 
cation of  in- 
flight catastro- 
phic event  and 
decision  to  egresi 
cy  flight  crew 

Information  not 
available 

Integrity  of  post" 
event  cabin  area 
and  deployment 

72 

In-flight  egress 
rapidje t 

Rapid  egress 
without  donning 
equipment. 

Egress  in  6 sec. 
intervals 

Inability  to  » 
reach  escape 
hatch  due  to  air- 
craft attitude; 
jamming  of  res- 
traint container 
and  parachute 

Immediately  after! 
decision  to  egresj 
cy  crew 

information  not 
; available 

Psychological 
reluctance  to 
jump  into  hatch 
without  assurance 
of  system  function 
Mechanical  failun 

73 

In-flight  egress 
capsule 

Provide  method 
(presently  non- 
existent) for 
in-flight  egress 
from  disabled 
aircraft  for 
passengers  and 
crew  not  equip- 
ped with  para- 
chutes 

Failure  of  cap- 
sule ejection  ord 
nance;  failure  of 
drogue  or  para- 
chute; non-surviv 
able  ground 
impact 

Immediately  afte 
-decision  by  crew 
to  egress 

r Information  nol 
available 

Jlust  function 
for  survivable 

74 

In-flight  egress 
fuselage  para- 
chute 

As  above  by 
lowering  intact 
fuselage.  No 
action  required 
by  passengers 

Failure  of  drogue 
and  parachute 
initiating  device 

Immediately  aftei 
decision  by  crew 
to  egress 

None  known 

Must  function  for 
survival 
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Item 

No. 

(See 

Tdbie 

7.) 

Item 

Required 

Function 

Failure 

Definition 

Critical  Time 
Period  in 
Function 
Exercise 

Effects  of 
Storage 
And 

Handling 

Reliability 

Critical 

Items 

53 

Tactile 

markers 

Provide  tactile 
sensors  for 
egress  where 
vision  poor  or 
not  existant 

Failure  to  re- 
main stable  in 
place,  incorrect 
positioning 

Must  be  available 
immediately  post- 
crash 

No  adverse 
effects  known 

Shape  provides 
direction  of 
exit  indication. 
Markers  must  be 
correctly  in- 
stalled to  remain 
in  place 

54- 

55 

Floor  level  and 
pulsating  aisle 
ma rkers 

Provide  visual 
references  for 
evacuation 

Do  not  work 

Immediately  post- 
crash 

None  known 

Pulse  sequence? 
Energy  source 

56, 

59 

Alarm  bell 

Warn  of 
emergency 

Fails  to  work,  o: 
warning  light 
fails 

■ Prior  to,  during 
and/or  subsequent 
to  crash,  ditch- 
ing, or  in-flight 
emergency 

None  if 

properly 

packaged 

Energy  source; 
Electrical 
circui ts 

57 

Bull  Horn 

To  provide 
portable 
emergency  P.A. 
sys  tern 

Power  failure 

Whenever  required 
as  emergency 
communication 
system  due  to 
failure  of 
primary  means 

Battery  deter- 
ioration 

Energy  source; 

Electrical 

circuits 

58 

Solid-state 

communications 

system 

Provide  portable 
communication 
between  crew 
members 

Does  not  receive 
or  transmit; 
garbled  signal, 
inadequate 
volume 

Whenever  required 
as  emergency 
communications 
system  due  to 
failure  of 
primary  means 

Unknown 

Energy  source; 
Electronic 
circui ts 

60 

ELSIE 

Provide  instant- 
aneous emergency 
exits 

Does  not  sever 
exit 

Can  be  initiated 
prior  to  ditching 
or  for  post-impac 
egress 

Information  not 
known 

Failure  of  any 
of  five  major 
components 

Item 

No. 

(See 

Table 

7.) 

I tern 

Required 

Function 

Failure 

Definition 

Critical  time 
Period  in 
Function 
Exercise 

Effects  of 
Storage 
and 

Handling 

Reliability 
Critical 
I terns 

61 

Telescape 

Fast  egress 
from  emergency 
door  exits 

Fails  to  extend; 
fails  to  reach 
ground  at  useful 
angle?  jams 

Immediately  post- 
crash, or  when 
emergency  egress 
required 

Hardware  can  be 
stored  indefin- 
ately;  gas 
source  may  leak; 
seal  deteriorate 

Not  essential 
item.  Can  provide 
important  functioi 
gas  storage  con- 
tainer and  col- 
lapsing tubular 
alignment  critical 
for  proper 
function 

62 

Escape  Rope 

Allow  egress 
from  cabin  over- 
head exits  or 
flight  deck 
windows 

Tangled?  support 
fails;  can  not  be 
located 

Immediately  post- 
crash, or  when 
smergency  egress 
requi red 

Can  be  stored 
without  decrement 
for  extended 
time  under  proper 
humidity  and 
temperature 

Serves  critical 
need  where  jump 
from  exit  would 
be  injurious. 
Strength  and 
stowage  critical 

63, 

65, 

70 

In  f 1 atable 
Escape  Slide 

Provide  fast 
reliable  emergen- 
cy egress  from 
exit  to  ground 

Failure  to  deploy 
or  inadvertent 
in  nation 

Immediately  post 
crash  or  when 
emergency  egress 
required 

Designed  for 
long-term 
stowage;  gas 
source  requires 
recharge 

Necessary  for 
emergency  egress. 
Mechanical 
(puncture)  fail- 
ure; failure  of 
inflation  source 

64 

S. B. /Escape 
Harness 

Automatic  egress 
in  emergency 
evacuation  or 
post-crash 

Inadequate 
restraint  fit  or 
failure  of  power 
system  due  to 
fuselage  damage 

Imediately  post- 
crash or  when 
emergency  egress 
required 

Insufficient  data 
available  on 
this  concept 

Not  essential 
for  egress.  Fail- 
ure of  restraint, 
power  system,  or 
linkage  would 
render  nonusable 

65 

Mechanical 

Folding 

Slide 

Serves  as  either 
walkway  or  stairs 
for  emergency 
egress 

Fails  to  deploy, 
jams,  fails  to 
reach  ground 

Immediately  post- 
crash or  whenever 
emergency  evac- 
uation required 

None  known 

Not  essential 
for  egress.  Fail- 
ure to  deploy  or 
jamming  may  be 
critical  factors 
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Item 
No. 
(See 
Table 
7.  ) 

Item 

Required 

Function 

Failure 

Definition 

Critical  Time 
Period  in 
Function 
Exercise 

Effects  of 
Storage 
and 

Handling 

Reliability 

Critical 

Items 

26 

Rear-facing  seat 
plus  lap  belt 

Provide  occupant 
crash  protection 

Seat  structural 
failure,  lap  bel 
failure,  or  fail 
ure  where  seat  i; 
attached  to  air- 
craft 

Must  function 
:during  crash 

Components  must 
be  maintained 
properly  and 
frayed  belts  re- 
placed 

Strength  of  crit- 
ical seat  struct- 
ural members,  lap 
belt  and  attach- 
ments. Requires 
user  action 

27, 

28 

Passive  net 
restraint  system 
(Nissan, Hamill) 

Provide  occupant 
crash  protection 

Does  not  deploy 
or  improperly 
positioned 

Must  function 
during  crash 

Most  components 
can  be  handled 
and  stored  easily 
with  careful  in- 
stallation and 
maintenance. 

This  is  a hazard 
level  II  device 

The  most  suscept- 
ible items  in 
this  system  are 
the  crash  sensor 
and  the  electro- 
mechanical actua- 
tion trigger. 
Function  necessary 
for  crash  protec- 
tion 

29 

Front-facing  seat 
plus  Air  Force 
lap  belt  and 
shoulder  harness 
with  inertia  ree] 

Provide  occupant 
protection  in 
crash  without 
reducing  crew 
ability  to  func- 
tion 

Seat  structural 
failure,  belt  or 
harness  failure, 
or  failure  where 
seat  is  attached 
to  aircraft. 

Must  function 
during  crash 

Components  re* 
quire  minimum 
attention  except 
for  restraint 
belt  maintenance 

Strength  of  com- 
ponents. Requires 
user  ac  ion 

30 

Troop  seat 

Provide  occupant 
protection  in 
crash 

Component 

failure 

Must  function 
during  crash 

Components  re- 
quire minimum 
attention  except 
for  restraint 
belt  maintenance 

Strenght  of  com- 
ponents. Requires 
briefing  and  user 
action 

Item 

No. 

(See 

Table 

7.) 

Item 

Required 

Function 

Failure 

Definition 

Critical  Time 
Period  in 
Function 
Exercise 

Effects  of 
Storage 
and 

Handling 

Reliability 

Critical 

Items 

31- 

37, 

40, 

42, 

43 

Smoke  hoods 
(rebreather) 

3-6  min.  duration 

Protect  against 
toxic  fumes, smoke 
flame.,  and  heat, 
and  provide  suf- 
ficient air  for 
emergency  egress 
without  signif- 
icant impairment 
Df  visual  acuity 
Dr  hearing 

Leaks,  obstructs 
vision,  impairs 
nearing,  or  fails 
to  protect 
against  flame, 
smoke,  or  toxic 
fumes.  Fails  to 
retain  air. 

3-6  minutes  post 
crash  for  donning 
and  egress 

Tears  along  fold 
lines,  in  reuse, 
deterioration 

Function  necess- 
ary for  egress 
in  smoke  and  fire 

38, 

39 

M.s.A.C.  smoke 
mask  and 
canister 

Removes  large 
smoke  particles 

defective  nose 
alip;  separated 
aose  clip; 
aanister  hose 
Leak 

Post-crash  egress 

Canister  hose 
deterioration, 
material  deterioi 
ation 

Function  of  pos- 
sible assistance 
- in  egress  in 
smoke  and  fire 

41 

N.A.R.  smoke  mask 

Filter  smoke 

filter  dried  out 

Post-crash  egress 

Duter  container 
seal  may  break, 
drying  out 
filter 

Function  of  pos- 
sible assistance 
for  egress  in 
smoke  and  fire 

44- 

46 

i 

Smoke  hoods 
(self-contained 
or  generated  air 
supply  of  long 
duration) 

Filter  smoke, 
tfash  out  CC>2  or 
provide  supply  of 
gas,  automatical- 
ly 

filter  dried  out, 
air  cylinder 
fails  to  work, 
failure  of  gas 
generator 

Post-crash  don- 
ning and  egress 

Deterioration  of 
materials,  loss 
of  gas  from  cyl- 
inder, deterior- 
ation of  chemi- 
cals 

Function  necessary 
for  egress  in 
smoke  and  fire 

47- 

52 

Emergency 

Illumination 

^sterns 

Provide  emergency 
aisle ,pathmarker, 
and  exit  illumin- 
ation 

Does  not  provide 
adequate  level 
of  illumination 

Must  function 
post-crash  for 
emergency  egress 

Most  components 
can  be  easily 
stored  and 
handled 

Must  function 
post-crash  in 
order  for  crew 
and  passengers 
to  egress 
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Item 

No. 

(See 

Table 

7.)  Item 

Required 

Function 

Failure 

Definition 

Critical  Time 
Period  in 
Function 
Exercise 

Effects  of 
Storage 
and 

Handling 

Reliability 

Critical 

Items 

1,2,  Stored  gas  and 
3,4  augmented  air 

inflation  de- 
vices 

Airbag  inflation 
sources 

No  gas  supplied 

Must  function 
before  or  during 
crash 

Possible  gas 
leakage.  Pres- 
sure monitor  ne- 
cessary . 

Function  neces- 
sary for  crash 
protection . 

5,6,  Propellant  and 
7 aspirator 

inflation  de- 
vices 

Airbag  inflation 
sources 

No  gas  supplied 

Must  function 
before  or  during 
crash 

It  is  estimated 
that  these  de- 
vices can  be 
stored  and  han- 
dled without  re- 
ducing function 

Function  neces- 
sary for  crash 
protection 

8,9,  Crash  impact 
10,11  sensors 

Provide  electri- 
cal signal  to 
airbag  infla- 
tion device 

No  signal  pro- 
vided 

Must  function 
before  or  during 
crash 

All  devices  are 
prototypes.  In- 
sufficient field 
data  is  avail- 
able 

Device  depends 
on  well-defined 
signal  defining 
imminence  or  oc- 
currence of  ac- 
cident. This 
data  is  not 
available . 

12,13  Airbag  material 
14 , 15 

Contain  infla- 
tion gas  and 
serve  as  protec- 
tive cushion 

Material  failure 
(tear  or  rip) 

Must  function 
before  or  during 
crash 

Materials  with 
adequate  proper- 
ties are  avail- 
able 

Function  neces- 
sary for  crash 
protection 

16-20  Airbag  fabric 
coating  mate- 
rials 



Reduce  airbag 
porosity  and 
heat  transfer 
from  inflation 
gasses 

Coating  mate- 
rial chosen 
which  is  subject 
to  environmental 
degradation  re- 
ducing function 

Must  function 
before  or  during 
. crash 

Materials  with 
adequate  proper- 
ties are  avail- 
able 

Not  a reliabil- 
ity critical 
item 

I tern 
No. 
(See 
Table 
7.) 

Item 

Required 

Function 

Failure 

Definition 

Critical  Time 
Period  in 
Function 
Exercise 

Effects  of 
Storage 
and 

Handling 

Reliability 

Critical 

Items 

23 

Airbag  for  pas- 
sengers on  near- 
facing seats 
using  standard 
lap  belts 

Provide  occupant 
crash  protection 

Does  not  inflate 
or  improperly 
positioned 

Must  function 
during  crash 

Most  components 
can  be  handled 
and  stored  easi- 
ly with  careful 
installation  and 
maintenance. 

This  is  a Hazard 
Level  II  device 

Not  a reliability 
critical  device. 

A rear-facing 
seat  with  lap 
belt  provides 
protection  with- 
out supplemental 
air  bag 

24 

Airbag  for  pas- 
sengers on  side- 
facing seats 

Provide  occupant 
crash  protection 

Does  not  inflate 
or  improperly 
positioned 

Must  function 
during  crash 

Most  components 
can  be  handled 
and  stored  easi- 
ly with  careful 
installation  find 
maintenance. 

This  is  a Hazard 
Level  II  device 

Function  neces- 
sary for  crash 
protection.  Be- 
cause prototypes 
offering  side 
impact  protec- 
tion are  in  the 
early  develop- 
mental stage,  the 
variables  gover- 
ning reliable 
air  bag  posi- 
tioning have  not 
vet  been  defined 

25 

Airbag  for  crew 
on  front-facing 
seat 

Provide  occupant 
crash  protection 
without  reducing 
crew  ability  to 
function. 

Does  not  inflate 
or  improperly 
positioned 

Must  function 
during  crash 

Most  components 
can  be  handled 
and  stored  easil; 
with  careful  in- 
stallation and 
maintenance.  Thii 
is  a hazard  leve 
II  device 

Function  necessar 
for  crash  protec- 
tion. Because  of 
the  necessity  for 
crew  function  dur • 
iing  and  post- 
. crash,  the  bag 
must  be  position- 
ed very  reliably. 
This  is  not  pos- 
sible wity  curren : 
generation  sys- 
tems 
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Noise  level 

Hazard  level 

Length  of  service 

Flammab i litv 

Short  term  toxicity 

Irritability 

Thermal  radiation 

Isolate  energy  sources 

Hazards  of  propellants 

Svstem  environmental 

constraints 

Use  o!  explosive  devices 
Compatibility  of 
materials 

Effect  of  electrical 
phenomena 

Inadvertent  actuation 

Use  of  pressure  vessels 

Crash  safety 

Safe  operation  and 

maintenance 

Training  for  0 and  ‘1 

Egress,  rescue,  survival 

Fire  ignition  and 

propagation 

Shock  resistance 

Layout  and  lighting 

requirements 

Fail-safe  design 

Vu  lnerabll ity 

Himan  error  potential 
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Hazard  level 

2 

2 
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Length  of  service 
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Thermal  radiation 
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TABLE  XV  PRELIMINARY  HAZARD  ANALYSIS  RATING  SYSTEM 


a.  Noise  level 

1.  No  problem 

2.  Possible  temporary  threshold  shift 

3.  Possible  permanent  hearing  impairment 

b.  Hazard  level 

1.  Negligible 

2.  Controllable  hazard  (marginal) 

3.  Will  cause  injury  without  immediate  action  (critical) 

4.  Failure  will  cause  injury  (catastrophic) 

c.  Length  of  service 

1.  Estimated  five  year  life  based  on  manufacturer's  data. 

2.  Less  than  5 years 

d.  Flammability 

1 . Low 

2.  Medium 

3.  High 

e.  Short  term  toxicity 

1.  None 

2.  Moderate  (could  be  dangerous  in  combination  with  other 
toxic  gases) 

3.  Dangerous  (qualitative  estimate) 

f.  Irritability 

1 . None 

2.  Moderate 

3.  Disablizing 

g.  Thermal  radiation 

1 . None 

2.  Moderate 

3.  Disablizing 

h.  Isolate  energy  sources 

1 . None  present 

2.  Necessary 

i.  Hazards  of  propellants 

1.  None  present 

2.  Designed  for  safe  handling 

3.  Prototype  systems  for  which  data  has  not  yet  been  developed. 

j.  System  environmental  constraints 

1.  Operates  the  same  under  all  required  conditions 
of  temperatures,  pressure,  and  humidity 

2.  Performance  varies  with  temperature,  pressure  and/ 
or  humidity 

k.  Use  of  explosive  devices 

1.  None  present 

2.  Hazard  level  II  when  installed 

l.  Compatibility  of  materials 

1.  No  problems  known 

2.  Possible  problem 

m.  Effect  of  electrical  phenomena  (current,  electrostatic  charge, 
or  electromagnetic  fields) 

1.  No  problems  known 

2.  Hazard  level  II,  III,  or  IV 

n.  Inadvertent  activation 

1.  No  problems  known 

2.  Research  accomplished  to  solve  problems 

3.  Research  Needed 

o.  Use  of  pressure  vessels 

1 . None  present 

2.  Necessary  component  (Hazard  level  II) 

p.  Crash  safety 

1.  Operable  after  and  during  survivable  crash 

2.  Marginal  operation  after  or  during  survivable  crash 

3.  Not  operable  after  or  during  survivable  crash 
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q.  Safe  operation  and  maintenance 

1.  No  problems  known 

2.  Hazard  level  II  (at  least)  at  all  times  during 
operation  and  maintenance 

r.  Training  for  operation  and  maintenance 

1.  None  required 

2.  Special  training  required  for  proper  use 

s.  Egress,  rescue,  survival 

1.  Enhanced  with  use  of  system 

2.  Unaffected  by  use  of  system 

3.  Hazardous  with  use  of  system 

t.  Fire  ignition  and  propagation  sources 

1.  None  present 

2.  Possible  source  present 

u.  Shock  resistance 

1.  Designed  for  operation  in  shock  environment 

2.  Susceptible  to  shock  damage 

v.  Layout  and  lighting  requirements 

1.  No  special  requirements 

2.  Special  lighting  and/or  layout  required  for  use 

w.  Fail-safe  design 

1 . Not  needed 

2.  Required  and  data  available  for  design  purposes 

3.  Required  and  data  needed 

x.  Vulnerability 

1.  Invulnerable 

2.  Vulnerable  to  tampering  and/or  prolonged  storage 

y.  Human  error  potential 

1.  Automotive  device,  no  training  needed 

2.  Manual  device,  no  training  needed 

3.  Automatic  device,  briefing  required 

4.  Manual  device,  briefing  required 

5.  Automatic  device,  briefing  and  training  required 

6.  Manual  device,  briefing  and  training  required 
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TABLE  XIX.  HUMAN  FACTORS  RATING  SYSTEM 


a. 


b. 


c. 


d. 


e. 


f. 


g- 


h. 


i . 


j. 


k. 


1. 


m. 


P- 


q. 


Noise 

1 . No  problem 

2.  Possible  temporary  threshold  shift 

3.  Possible  permanent  hearing  impairment 

Visibility 

1.  No  decrement  when  using  system 

2.  Partial  decrement  when  using  system 

3.  No  visibility  when  using  system 

Ability  to  hear 

1.  No  decrement  when  using  system 

2.  Partial  decrement  when  using  system 

3.  No  hearing  when  using  system 

Ease  of  use 

1.  No  experience  or  briefing  necessary 

2.  Briefing  necessary  before  use 

3.  Briefing  and  training  necessary  before  use 

Human  tolerance  to  impact 

1.  No  injuries  with  proper  system  use 

2.  Possible  injuries  even  with  proper  system  use 

Possible  thermal  hazard 

1.  No 

2.  Yes 

Possible  toxicological  hazard 

1 . No 

2.  Yes 

Possible  pyrotechnic  hazard 

1.  No 

2.  Yes 

Possible  visual  hazard 

1 . no 

2.  yes 

Space  to  carry  out  functions 

1.  No  restriction  on  user  mobility  or  function  based  on  crash 
impact  protection  and  emergency  egress  flowchart 

2.  Possible  partial  restriction  on  passenger/crew  egress 
or  crew  function  in  operating  aircraft 

3.  System  use  precludes  other  activity 

II lumi  nation 

1.  Needed  for  system  use 

2.  Not  needed  for  system  use 

Normal  ingress  and  egress 

1.  Unaffected  by  system 

2.  Requires  user  action  to  activate  system 

Non-restricti ve  life  support  and  protective  equipment 

1.  Mobility  and/or  communication  enhanced  by  use  of  system 

2.  Mobility  and/or  communication  unaffected  by  use  of  system 

3.  Mobility  and/or  communication  reduced  by  use  of  system 

Psychophysiological  stress 

1.  No  increased  psychophysiological  stress  associated 
with  system  use 

2.  Minor  psychophysiological  stress  associated  with  system  use 

3.  Potential  inability  to  function 

Fail-safe  design 

1.  Yes 

2.  No 
Simpl icity 

1 . No  movable  parts 

2.  Moving  mechanical  parts 

3.  Complex  electro-mechanical  device 

4.  Complex  electro-mechanical  device  with  associated  electronic 

circuitry. 

Anthropometric  considerations 

1.  Minor  design  consideration 

2.  Major  design  consideration  (system  function  strongly 

dependent  on  anthropometric  variables) 
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appendix  f 

The  following  is  a list  of  manufacturers  of  the  various  aisle  and  emergency  egress  illumination 


systems  discussed  in  Section  5. 

CHEMO-ILLUMINESCENCE 

American  Cyanamid  Company 
Organic  Chemicals  Division 
Bound  Brook,  New  Jersey  08305 

Remington  Arms  Company 

939  Barnum  Avenue 

Bridgeport,  Connecticut  06602 

ELECTRO  ILLUMINESCENCE 

Grimes  Manufacturing  Company 
515  N.  Russell  Street 
Urbana,  Ohio  43078 

Honeywell,  Inc. 

Honeywell  Plaza 
Minneapolis,  Minnesota  55408 

MLM  Electronics 
130.  E.  River  Drive 
Willingboro,  New  Jersey  08046 

Plumly  Industries 
Ft.  Worth,  Texas 

Scott  Aviation 
Division  of  A.T.0. , Inc. 

225  Erie  Street 
Lancaster,  New  York  14086 

Soderberg  Manufacturing  Company,  Inc. 
628  S.  Palm  Avenue 
Alhambra,  California  91803 

Sylvania  Products,  Inc. 

60  Boston  Street 

Salem,  Massachusetts  01970 

GASEOUS  DISCHARGE  SYSTEMS 

A.C.R.  Electronics,  Inc. 

1 1 2 Voice  Road 
Carle  Place 

New  York,  New  York  11514 

Birns  and  Sawyer,  Inc. 

1026  N.  Highland  Avenue 

Los  Angeles,  California  90038 

Electronic  Lights,  Inc. 

Division  of  Kemlite  Lab.,  Inc. 

1701  N.  Ashland  Avenue 
Chicago,  Illinois  60622 

Illumination  Industries,  Inc. 

610  Vaqueros  Avenue 
Sunnyvale,  California  94086 

Kemlite  Laboratories,  Inc. 

1819  W.  Grand  Avenue 
Chicago,  Illinois  60622 

LTV  Electro  Systems,  Inc. 

P.0.  Box  6030 
Dallas,  Texas  75222 

Life  Support  Technology,  Inc. 

4820  S.W.  Lloyd  Avenue 
Beaverton,  Oregon  97005 

MLM  Electronics 
130  E.  River  Drive 
Willingboro,  New  Jersey  08046 


Pichel  Industries,  Inc. 

Division  of  Optics 
693  S.  Raymond  Avenue 
Pasadena,  California  91105 

Soderberg  Manufacturing  Company,  Inc. 

628  S.  Palm  Avenue 
Alhambra,  California  91803 

Whelen  Engineering  Company 
3 Winter  Avenue 

Deep  River,  Connecticut  06417 

Zip  Com  Corporation 
5620  West  12th  Street 
Littlerock,  Arkansas  72204 

ULTRAVIOLET  PATHWAY  MARKERS 

Luminex,  Inc. 

P.0.  Box  696 

Santa  Barbara,  California  93102 

SELF-LUMINOUS  SOURCES  (TRITIUM)  AND  PHOSPHORESCENT 
MARKERS 

Conrad  Precision 
630  5th  Avenue 
New  York,  New  York 

U.S.  Radium  Corporation 
Morristown,  New  Jersey  07960 

INCANDESCENT  SOURCES 

Chicago  Miniature  Lamp  Works 
4453  North  Ravenwood 
Chicago,  Illinois 

General  Electric 
Nela  Park 

Cleveland,  Ohio  44122 

Grimes  Manufacturing  Company 
515  North  Russell  Street 
Urbana,  Ohio  43078 

Life  Support  Technology,  Inc. 

4820  S.W.  Lloyd  Avenue 
Beaverton,  Oregon  97005 

LTV  Electro  Systems,  Inc. 

P.0.  Box  6030 
Dallas,  Texas  75222 

Pichel  Industries,  Inc. 

693  S.  Raymond  Avenue 
Pasadena,  California  91105 

Pile  National  Company 
1334  N.  Kostner  Avenue 
Chicago,  Illinois  60651 

Scott  Aviation 
Division  of  A.T.O.,  Inc. 

225  Erie  Street 
Lancaster,  New  York  14086 

Soderberg  Manufacturing  Company,  Inc. 

628  S.  Palm  Avenue 
Alhambra,  California  91803 
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